<div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif;font-size:small">I have now tested this ruleset:</div><div class="gmail_default"><div class="gmail_default"><font face="georgia, serif"><br></font></div>
<div class="gmail_default"><font face="georgia, serif"><ruleset name="ICA Banken"></font></div><div class="gmail_default"><font face="georgia, serif"><span style="white-space:pre-wrap"> </span><target host="<a href="http://www.icabanken.se" target="_blank">www.icabanken.se</a>"/></font></div>
<div class="gmail_default"><font face="georgia, serif"><span style="white-space:pre-wrap"> </span><target host="<a href="http://icabanken.se" target="_blank">icabanken.se</a>"/></font></div><div class="gmail_default">
<font face="georgia, serif"><span style="white-space:pre-wrap"> </span><rule from="^http://(www\.)?icabanken\.se/" to="<a href="https://www.icabanken.se/" target="_blank">https://www.icabanken.se/</a>" /></font></div>
<div class="gmail_default"><font face="georgia, serif"><securecookie host="^(.*\.)?icabanken\.se$" name=".*" /></font></div><div class="gmail_default"><font face="georgia, serif"></ruleset></font></div>
<div class="gmail_default"><font face="georgia, serif"><br></font></div></div><div class="gmail_default" style="font-family:georgia,serif;font-size:small">… with Firefox 26 and HTTPS Everywhere 4.0development.14. The rule works, but I don’t know how to check if the securecookie-rule is correct and works as intended.</div>
<div class="gmail_default" style="font-family:georgia,serif;font-size:small"><br></div><div class="gmail_default" style="font-family:georgia,serif;font-size:small">Thank you Brian for your guidance and your patience. </div>
<div class="gmail_default" style="font-family:georgia,serif;font-size:small"><br></div><div class="gmail_default" style="font-family:georgia,serif;font-size:small">Thanks and regards,</div><div class="gmail_default" style="font-family:georgia,serif;font-size:small">
Joakim</div><div class="gmail_default" style="font-family:georgia,serif;font-size:small"><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014/1/14 Drake, Brian <span dir="ltr"><<a href="mailto:brian@drakefamily.tk" target="_blank">brian@drakefamily.tk</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Yes, both <target> elements are required. As I understand it, they tell the software which rulesets to process. Therefore, if you are missing the one without “www”, then when you have a request to <a href="http://icabanken.se/" target="_blank">http://icabanken.se/</a>, the software won’t process this ruleset at all.<br>
<div><div class="gmail_extra"><br></div><div class="gmail_extra">I had a quick look at the site and its cookies and there seems to be no indication of any other subdomains.<br></div><div class="gmail_extra"><br></div><div class="gmail_extra">
So it would probably be a good idea to install the ruleset with the <securecookie> tag and test it, if you haven’t done that already.<br></div><div class="gmail_extra"><br clear="all"></div><div class="gmail_extra">
<div class="im">
<div><div dir="ltr"><div>--<br>Brian Drake<br><br>All content created by me: <a href="http://www.wipo.int/treaties/en/ip/berne/trtdocs_wo001.html" target="_blank">Copyright</a> © 2014 Brian Drake. All rights reserved.<br>
</div></div></div>
<br></div><div class="gmail_quote"><div class="im">On Tue, Jan 14, 2014 at 1627 (UTC), Joakim Walldén <span dir="ltr"><<a href="mailto:joakim.wallden@gmail.com" target="_blank">joakim.wallden@gmail.com</a>></span> wrote:<br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div><div dir="ltr"><div style="font-family:georgia,serif;font-size:small">Thanks.<br></div><div class="gmail_quote"><div class="im"><div dir="ltr"><div style="font-family:georgia,serif;font-size:small"><br>
</div><div style="font-family:georgia,serif;font-size:small">
So <target host="<a href="http://icabanken.se" target="_blank">icabanken.se</a>"/>, without “www”, must be included, although only <a href="http://www.icabanken.se" target="_blank">www.icabanken.se</a> is available.</div>
<div style="font-family:georgia,serif;font-size:small">
<br></div><div><div><div><font face="georgia, serif"><ruleset name="ICABANKEN.se"></font></div><div><font face="georgia, serif"><span style="white-space:pre-wrap"> </span><target host="<a href="http://www.icabanken.se" target="_blank">www.icabanken.se</a>"/></font></div>
</div><div><font face="georgia, serif"><span style="white-space:pre-wrap"> </span><target host="<a href="http://icabanken.se" target="_blank">icabanken.se</a>"/></font></div><div><div>
<font face="georgia, serif"><span style="white-space:pre-wrap"> </span><rule from="^<a href="http://icabanken" target="_blank">http://icabanken</a>\.se/" to="<a href="https://www.icabanken.se/" target="_blank">https://www.icabanken.se/</a>"/></font></div>
<div><font face="georgia, serif"><span style="white-space:pre-wrap"> </span><rule from="^<a href="http://www" target="_blank">http://www</a>\.icabanken\.se/" to="<a href="https://www.icabanken.se/" target="_blank">https://www.icabanken.se/</a>"/></font></div>
<div><font face="georgia, serif"></ruleset></font></div><div><font face="georgia, serif"><br></font></div></div><div><font face="georgia, serif">Or, with the suggested combined rule:</font></div>
<div><font face="georgia, serif"><br></font></div><div><div><div><font face="georgia, serif"><ruleset name="ICABANKEN.se"></font></div><div>
<font face="georgia, serif"><span style="white-space:pre-wrap"> </span><target host="<a href="http://www.icabanken.se" target="_blank">www.icabanken.se</a>"/></font></div></div><div><font face="georgia, serif"><span style="white-space:pre-wrap"> </span><target host="<a href="http://icabanken.se" target="_blank">icabanken.se</a>"/></font></div>
<div>
<div><font face="georgia, serif"><span style="white-space:pre-wrap"> </span><rule from="^http://(www\.)?icabanken\.se/" to="<a href="https://www.icabanken.se/" target="_blank">https://www.icabanken.se/</a>" /></font></div>
</div><div><font face="georgia, serif"></ruleset></font></div></div><div><font face="georgia, serif"><br></font></div><div><font face="georgia, serif">Secure cookie, maybe </font></div><div>
<div><font face="georgia, serif"><br></font></div><div><font face="georgia, serif"><securecookie host="^(.*\.)?icabanken\.se$" name=".*" /></font></div>
<div><font face="georgia, serif"><br></font></div></div><div><font face="georgia, serif">As far as I have seen, the entire site is available over HTTPS. Most links on the page lead to HTTP, unless the user is logged in. However, I have the domain added to Chrome’s HSTS-list, and that works well. I am not aware of any subdomains, only <a href="http://www.icabanken.se" target="_blank">www.icabanken.se</a>.</font></div>
<div><font face="georgia, serif"><br></font></div><div><font face="georgia, serif">Thanks and regards,</font></div><div><font face="georgia, serif">Joakim</font></div>
</div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014/1/13 (UTC) Drake, Brian <span dir="ltr"><<a href="mailto:brian@drakefamily.tk" target="_blank">brian@drakefamily.tk</a>></span><div class="im">
<div><div>
<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr"><div>It looks good, except that you are missing <target host="<a href="http://icabanken.se" target="_blank">icabanken.se</a>" />.<br><br>Again, you could combine the rules:<br><br><rule from="^http://(www\.)?icabanken\.se/" to="<a href="https://www.icabanken.se/" target="_blank">https://www.icabanken.se/</a>" /><br>
</div><div><div><div class="gmail_extra"><br></div><div class="gmail_extra">This does the same thing as the separate rules, but in one rule.<br></div><div class="gmail_extra"><br></div><div class="gmail_extra">If the entire site is available over HTTPS, you should secure the cookies (but I don’t have much experience myself in that area).<br>
</div><div class="gmail_extra"><br></div><div class="gmail_extra"><securecookie host="^(.*\.)?icabanken\.se$" name=".*" /><br></div><div class="gmail_extra"><br></div><div class="gmail_extra">Remember to consider any other subdomains of <a href="http://icabanken.se" target="_blank">icabanken.se</a> when you do that.<br>
</div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><div>--<br>Brian Drake<br><br>All content created by me: <a href="http://www.wipo.int/treaties/en/ip/berne/trtdocs_wo001.html" target="_blank">Copyright</a> © 2014 Brian Drake. All rights reserved.<br>
</div></div></div><div><div>
<br><div class="gmail_quote">On Mon, Jan 13, 2014 at 1417 (UTC), Joakim Walldén <span dir="ltr"><<a href="mailto:joakim.wallden@gmail.com" target="_blank">joakim.wallden@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr"><div style="font-family:georgia,serif;font-size:small">Hi,</div><div style="font-family:georgia,serif;font-size:small"><br></div><div style="font-family:georgia,serif;font-size:small">
I suggest adding a ruleset for <a href="http://icabanken.se" target="_blank">icabanken.se</a>.</div><div><div><font face="georgia, serif"><br></font></div><div><font face="georgia, serif"><ruleset name="ICABANKEN.se"></font></div>
<div><font face="georgia, serif"><span style="white-space:pre-wrap"> </span><target host="<a href="http://www.icabanken.se" target="_blank">www.icabanken.se</a>"/></font></div><div>
<font face="georgia, serif"><span style="white-space:pre-wrap"> </span><rule from="^<a href="http://icabanken" target="_blank">http://icabanken</a>\.se/" to="<a href="https://www.icabanken.se/" target="_blank">https://www.icabanken.se/</a>"/></font></div>
<div><font face="georgia, serif"><span style="white-space:pre-wrap"> </span><rule from="^<a href="http://www" target="_blank">http://www</a>\.icabanken\.se/" to="<a href="https://www.icabanken.se/" target="_blank">https://www.icabanken.se/</a>"/></font></div>
<div><font face="georgia, serif"></ruleset></font></div><div><font face="georgia, serif"><br></font></div><div><font face="georgia, serif">I hope it is correctly created.</font></div>
<div><font face="georgia, serif"><br></font></div><div><font face="georgia, serif">Thanks and regards,</font></div><div><font face="georgia, serif">Joakim</font></div>
</div></div>
</blockquote></div></div></div></div></div></div></div>
</blockquote></div></div></div></div></div>
</div></div>
</div></div></blockquote></div></div></div></div>
</blockquote></div><br></div>