Update Harvard-University related rulesets

src/chrome/content/rules/Harvard-University-expired.xml

@@ -2,14 +2,12 @@
 	For rules that are on by default, see Harvard-University.xml.
 
 -->
-<ruleset name="Harvard.edu (problematic)" default_off="expired, missing certificate chain, self-signed">
+<ruleset name="Harvard.edu (problematic)" default_off="mismatches, missing certificate chain">
 
 	<!--	Direct rewrites:
 				-->
-	<target host="downloads.rc.fas.harvard.edu" />
 	<target host="pngu.mgh.harvard.edu" />
 	<target host="read.seas.harvard.edu" />
-	<target host="yuba.harvard.edu" />
 
 
 	<securecookie host="." name="." />

src/chrome/content/rules/Harvard-University.xml

@@ -30,6 +30,7 @@
 		- reference.pin		(reused_issuer_and_serial)
 		- mirrors.seas ⁴
 		- people.seas ᵈ
+		- post ᵈ 
 		- thestorymap ⁴
 		- worldmap ᵈ
 		- www.wjh ⁴
@@ -57,7 +58,6 @@
 		- pin *
 		- www.pin	($ redirects to http)
 		- pngu.mgh	(expired)
-		- saas **
 		- read.seas	(Self-signed)
 		- trademark		(Mismatched, CN: hwp.harvard.edu)
 		- yuba			(works; expired 2008-04-16, CN: localhost.localdomain)
@@ -67,7 +67,6 @@
 
 	ᶜ Server sends no certificate chain, see https://whatsmychaincert.com
 	* Mismatched
-	** Cert only matches www.saas
 
 
 	Partially covered hosts in *harvard.edu:
@@ -138,15 +137,14 @@
 
 	<target host="www.cfa.harvard.edu" />
 	<target host="cqh.harvard.edu" />
-	<target host="dome.harvard.edu" />
-	<target host="dspace.harvard.edu" />
+
 	<target host="economics.harvard.edu" />
 	<target host="pearson.eps.harvard.edu" />
 
-	<target host="account.fas.harvard.edu" />
 	<target host="astronomy.fas.harvard.edu" />
-	<!--target host="downloads.fas.harvard.edu" /-->
+	<target host="downloads.fas.harvard.edu" />
 	<target host="rc.fas.harvard.edu" />
+	<target host="downloads.rc.fas.harvard.edu" />
 	<target host="static.fas.harvard.edu" />
 
 	<target host="hbdm.hbsp.harvard.edu" />
@@ -174,11 +172,8 @@
 	<target host="blogs.law.harvard.edu" />
 	<target host="cyber.law.harvard.edu" />
 
-	<target host="oncampus.harvard.edu" />
 	<target host="www.pin1.harvard.edu" />
-	<target host="post.harvard.edu" />
 	<target host="secure.post.harvard.edu" />
-	<target host="www.saas.harvard.edu" />
 
 	<target host="computefest.seas.harvard.edu" />
 	<target host="iacs.seas.harvard.edu" />
@@ -207,8 +202,6 @@
 	<target host="orgs.law.harvard.edu" />
 
 	<target host="pin.harvard.edu" />
-	<target host="www.pin.harvard.edu" />
-	<target host="saas.harvard.edu" />
 	<target host="www.trademark.harvard.edu" />
 	<target host="media.www.harvard.edu" />
 
@@ -290,23 +283,10 @@
 
 		<!--exclusion pattern="^http://mirrors\.seas\.harvard\.edu/" /-->
 
-
-	<!--	Not secured by server:
-					-->
-	<!--securecookie host="^community\.alumni\.harvard\.edu$" name="^JSESSIONID$" /-->
-	<!--securecookie host="^connects\.catalyst\.harvard\.edu$" name="^ASP\.NET_SessionId$" /-->
-	<!--securecookie host="^rc\.fas\.harvard\.edu$" name="^(?:PHPSESSID|wfvt_\d+)$" /-->
-	<!--securecookie host="^account\.rc\.fas\.harvard\.edu$" name="^csrftoken$" /-->
-	<!--securecookie host="^downloads\.rc\.fas\.harvard\.edu$" name="^wordpress(?:_logged_in|_sec|user)?_[\da-f]{32}$" /-->
-	<!--securecookie host="^odybot\.rc\.fas\.harvard\.edu$" name="^PHPSESSID$" /-->
-	<!--securecookie host="^\.hul\.harvard\.edu$" name="^SESS[\da-f]{32}$" /-->
-	<!--securecookie host="^orgs\.law\.harvard\.edu$" name="^X-Mapping-" /-->
-	<!--securecookie host="^secure\.post\.harvard\.edu$" name="^TS[\da-f]+$" /-->
-
 	<securecookie host="^(?:community\.alumni|connects\.catalyst|rc\.fas|\w.*\.rc\.fas|login\.icommons|.*\.law|www\.pin1|secure\.post|www\.seas)\.harvard\.edu$" name=".+" />
 
 
-	<rule from="^http://(berkman|hsph|pin|saas)\.harvard\.edu/"
+	<rule from="^http://(berkman|hsph)\.harvard\.edu/"
 		to="https://www.$1.harvard.edu/" />
 
 	<rule from="^http://media\.campaign\.harvard\.edu/"