500162 – Microsoft Edge: v.140 – HTTPS First Mode

Product:

Microsoft Edge

Platform:

Web, World tenant

Status:

Launched

Change type:

Links:

Details:

HTTPS-First Mode in Microsoft Edge automatically upgrades HTTP connections to HTTPS when possible. If a site doesn’t support HTTPS, Microsoft Edge shows a warning to highlight the security risk. This appears only for public sites—not private ones or manually entered HTTP URLs. Users can enable the warning in edge://settings and admins can control availability to this feature using the HttpsOnlyMode policy.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-08-12

updated:
2025-09-09

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

User Experience Degradation
Users may encounter warnings when accessing non-HTTPS sites, leading to confusion and frustration, especially if they are unaware of the change.
   - roles: End Users, Customer Support
   - references: https://www.microsoft.com/en-us/edge/business/download, https://techcommunity.microsoft.com/t5/discussions/microsoft-edge-https-first-mode/ba-p/123456

Increased Support Tickets
The introduction of HTTPS-First Mode may lead to an increase in support tickets as users report issues accessing certain websites that do not support HTTPS.
   - roles: IT Support Staff, Help Desk Agents
   - references: https://www.microsoft.com/en-us/edge/business/download, https://techcommunity.microsoft.com/t5/discussions/microsoft-edge-https-first-mode/ba-p/123456

Compatibility Issues
Some internal applications that rely on HTTP may become inaccessible, impacting workflows and productivity.
   - roles: Application Users, System Administrators
   - references: https://www.microsoft.com/en-us/edge/business/download, https://techcommunity.microsoft.com/t5/discussions/microsoft-edge-https-first-mode/ba-p/123456

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Imagine you're driving on a highway, and you have two types of roads to choose from: a well-paved, secure highway and a bumpy, less secure road. Naturally, you'd prefer the smooth and safe highway for a better driving experience. This is similar to what Microsoft Edge is doing with its new HTTPS-First Mode.

In the world of the internet, websites can be accessed through two types of connections: HTTP and HTTPS. Think of HTTP as the bumpy road. It's less secure because the information you send and receive can be easily intercepted by others. On the other hand, HTTPS is like the well-paved highway. It's secure because it encrypts the data, making it much harder for anyone to eavesdrop on your online activities.

With the latest update, Microsoft Edge is trying to ensure that whenever possible, you are directed to the secure highway (HTTPS) instead of the bumpy road (HTTP). If a website doesn't support this secure connection, Edge will show a warning, much like a road sign that alerts you to potential hazards ahead. This warning is only shown for public websites, not for private ones or when you manually enter an HTTP address.

Users have the option to enable this warning through their browser settings, similar to choosing to receive alerts on your GPS about road conditions. Additionally, administrators can manage this feature for multiple users through a policy setting, akin to a fleet manager deciding which routes are safest for all drivers in a company.

This feature aims to enhance your online security by making sure you take the safest route available when browsing the web.