<!--
	There are lots of places where it doesn't work, so rather
	than add lots of exclusions, I've only added added rules
	for sections of the site that I know allow it.


	Nonfunctional subdomains:

		- blog
		- press	(expired; 403)


	Problematic domains:

		- licdn.com subdomains:

			- m.c.lnkd	(dropped)
			- m[1-4]	(400; mismatched, CN: *.llnw.com)
			- s[1-4]	(works, akamai)


	Fully covered domains:

		- static.licdn.com

    LinkedIn users should also enable secure connections from:
    - https://www.linkedin.com/settings/security-v2
-->
<ruleset name="LinkedIn (buggy)" default_off="unreliable">

	<target host="*.licdn.com" />
	<target host="linkedin.com" />
	<target host="*.linkedin.com" />


	<!--	Set by analytics/	-->
	<securecookie host="^www\.linkedin\.com$" name="^(?:bcookie|L1e|X-LI-IDC)$" />


	<rule from="^http://m\.c\.lnkd\.licdn\.com/"
		to="https://m1-s.licdn.com/" />

	<rule from="^http://([ms][1-4])(?:-s)?\.licdn\.com/"
		to="https://$1-s.licdn.com/" />

	<rule from="^http://static\.licdn\.com/"
		to="https://static.licdn.com/" />

	<!--	- !www times out over https
		- !www 301s to www over http
						-->
	<rule from="^http://(?:www\.)?linkedin\.com/$"
		to="https://www.linkedin.com/" />

	<!--	These paths redirect to http:

			- groups?gid=\d+
			- mpr$
			- static?key=.+
					-->
	<rule from="^http://(?:www\.)?linkedin\.com/(analytics|company|home|media|profile|reg|scds|secure|settings|today|uas|ucds)([\?\/].*)?$"
		to="https://www.linkedin.com/$1$2" />

	<rule from="^http://(?:www\.)?linkedin\.com/(img/|reg/join|mpr/)"
		to="https://www.linkedin.com/$1" />

	<!--	Akamai.
			-->
	<rule from="^http://media(?:0[1-4])?\.linkedin\.com/"
		to="https://www.linkedin.com/" />

	<rule from="^http://platform\.linkedin\.com/"
		to="https://platform.linkedin.com/" />

	<!--	Akamai	-->
	<rule from="^http://static0([1-4])\.linkedin\.com/"
		to="https://s$1-s.licdn.com/" />

</ruleset>
