Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with

Configure the list of URL patterns for sites that the browser will attempt to perform the Token Binding protocol with.
For the domains on this list, the browser will send the Token Binding ClientHello in the TLS handshake (See https://tools.ietf.org/html/rfc8472).
If the server responds with a valid ServerHello response, the browser will create and send Token Binding messages on subsequent https requests. See https://tools.ietf.org/html/rfc8471 for more info.

If this list is empty, Token Binding will be disabled.

This policy is only available on Windows 10 devices with Virtual Secure Mode capability.

Starting in Microsoft Edge 86, this policy no longer supports dynamic refresh.

Example value:

mydomain.com
[*.]mydomain2.com
[*.].mydomain2.com

Supported on: Microsoft Edge version 83, Windows 7 or later

Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with

Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry PathSoftware\Policies\Microsoft\Edge\AllowTokenBindingForUrls
Value Name{number}
Value TypeREG_SZ
Default Value

msedge.admx

Administrative Templates (Computers)

Administrative Templates (Users)