Policy
Configure the list of names that will bypass the HSTS policy check
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Setting the policy specifies a list of hostnames that bypass preloaded HSTS (HTTP Strict Transport Security) upgrades from http to https. Only single-label hostnames are allowed in this policy, and this policy only applies to static HSTS-preloaded entries (for example, "app", "new", "search", and "play"). This policy doesn't prevent HSTS upgrades for servers that have dynamically requested HSTS upgrades using a Strict-Transport-Security response header. Supplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. This policy only applies to the specific single-label hostnames specified and not to subdomains of those names. Example value: meet
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Configure the list of names that will bypass the HSTS policy check ID HSTSPolicyBypassListDesc | list | Path Software\Policies\Microsoft\Edge\HSTSPolicyBypassList Value name 1, 2, … Type REG_SZ | List: standard |