[HTTPS-E Rulesets] New ruleset for The Open University

[Peter Eckersley]

This is a great ruleset, but we are going to have to disable it by default
unless/until someone can patch it to fix these bugs:

https://trac.torproject.org/projects/tor/ticket/3791

On Thu, Feb 24, 2011 at 10:17:36PM +0100, M.Th.Aartsen at zonnet.nl wrote:
> Hi,
> 
> I created two rulesets for The Open University (see attachments).
> The second ruleset, "OU (cert).xml", causes certificate errors but
> may be useful for people with e.g. the Perspectives FF plugin.
> 
> I am not well-versed in RegEx so I mainly used copy/paste from other
> rulesets; I hope it is acceptable. At least it works.
> 
> thanks,
> Marcel

> <ruleset name="The Open University">
> <!--
>         The OU has myriads of domains, most of which do not support https.
>         Specifically, it appears that all department and faculty websites
>         do not support it.
> 
>         However this ruleset does cover the general website, the prospectuses
>         (undergraduate, graduate and research), StudentHome, TutorHome,
>         OpenLearn/LearningSpace, LabSpace, and the OU Alumni website.
> 
>         Notable exceptions: www2.open.ac.uk, www8.open.ac.uk, library.open.ac.uk,
>                             voyager.open.ac.uk, discuss2.open.ac.uk, www.open2.net
> 
>         Unknown: intranet.open.ac.uk, intranet-gw.open.ac.uk
> 
>         This ruleset does not include mail.google.com as that is already covered
>         by the GoogleServices ruleset.
> -->
>   <target host="css2.open.ac.uk" />
>   <target host="labspace.open.ac.uk" />
>   <target host="learn.open.ac.uk" />
>   <target host="msds.open.ac.uk" />
>   <target host="openlearn.open.ac.uk" />
>   <target host="www.open.ac.uk" />
>   <target host="www3.open.ac.uk" />
> 
> <!--	The OU forwards www.openuniversity.ac.uk to www.open.ac.uk,
>         but www.openuniversity.ac.uk does not support https. So we rewrite
>         http://www.openuniversity.ac.uk directly to https://www.open.ac.uk
> -->
>   <target host="www.openuniversity.ac.uk" />
> 
> <!--
>         The OU Worldwide offers lots of OU module materials
> -->
>   <target host="www.ouw.co.uk" />
> 
> <!--
>         The OU Students Association, and their webshop
> -->
>   <target host="www.ousa.org.uk" />
>   <target host="rsm2.rsmsecure.com" />
> 
>   <rule from="^http://([^@:/]+)\.open\.ac\.uk/" to="https://$1.open.ac.uk/"/>
>   <rule from="^http://www\.openuniversity\.ac\.uk/" to="https://www.open.ac.uk/"/>
>   <rule from="^http://www\.ouw\.co\.uk/" to="https://www.ouw.co.uk/"/>
>   <rule from="^http://rsm2\.rsmsecure\.com/ousacart/webstore/" to="https://rsm2.rsmsecure.com/ousacart/webstore/"/>
>   <rule from="^http://www\.ousa\.org\.uk/" to="https://www.ousa.org.uk/"/>
> </ruleset>
> <ruleset name="More Open University (certificate error)">
>         <target host="www2.open.ac.uk" />
>         <target host="library.open.ac.uk" />
>         <target host="www.ouworldwide.com" />
> 
>   <rule from="^http://([^@:/]+)\.open\.ac\.uk/" to="https://$1.open.ac.uk/"/>
>   <rule from="^http://www\.ouworldwide\.com/" to="https://www.ouworldwide.com/"/>
> </ruleset>

-- 
Peter Eckersley                            pde at eff.org
Technology Projects Director      Tel  +1 415 436 9333 x131
Electronic Frontier Foundation    Fax  +1 415 436 9993