Disable Certificate Transparency enforcement for a list of URLs

Policy ID
CertificateTransparencyEnforcementDisabledForUrls
Scope
Computer Configuration, User Configuration
Supported on
Microsoft Windows 7 or later
Source
Google Chrome Policy Templates (version 156.0.8078.80)
Category
Google › Google Chrome

Description

Setting the policy turns off Certificate Transparency disclosure requirements for the hostnames in the specified URLs. While making it harder to detect misissued certificates, hosts can keep using certificates that otherwise wouldn't be trusted (because they weren't properly publicly disclosed).

Leaving the policy unset means that if certificates requiring disclosure through Certificate Transparency aren't disclosed, then Google Chrome doesn't trust those certificates.

A URL pattern follows this format ( https://support.google.com/chrome/a?p=url_blocklist_filter_format ). However, because the validity of certificates for a given hostname is independent of the scheme, port, or path, Google Chrome only considers the hostname portion of the URL. Wildcard hosts aren't supported.

Example value:

example.com
.example.com

Options

  • Disable Certificate Transparency enforcement for a list of URLs

Registry

Other policies in the same category

View all policies in this category (235)