Policy
Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with (obsolete)
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 129. This policy is obsolete because Token Binding is no longer supported, starting with Microsoft Edge 130. Configure the list of URL patterns for sites that the browser attempts to perform the Token Binding protocol with. For the domains on this list, the browser sends the Token Binding ClientHello in the TLS handshake (See https://tools.ietf.org/html/rfc8472). If the server responds with a valid ServerHello response, the browser creates and sends Token Binding messages on subsequent https requests. See https://tools.ietf.org/html/rfc8471 for more info. If this list is empty, Token Binding is disabled. This policy is only available on Windows 10 devices with Virtual Secure Mode capability. Starting in Microsoft Edge 86, this policy no longer supports dynamic refresh. Example value: mydomain.com [*.]mydomain2.com [*.].mydomain2.com
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with ID AllowTokenBindingForUrlsDesc | list | Path Software\Policies\Microsoft\Edge\AllowTokenBindingForUrls Value name 1, 2, … Type REG_SZ | List: standard |