HttpsOnlyMode

Configure HTTPS-Only Mode.

In HTTPS-Only Mode, Firefox attempts to upgrade HTTP connections to HTTPS and shows a warning page when a site is only available over HTTP. To exempt specific sites from the upgrade, use the HttpAllowlist policy.

Compatibility

Firefox	Firefox ESR	Firefox Enterprise
Available since 127	Available since 128	Available since 149

CCK2 Equivalent: N/A
OMA-URI: HttpsOnlyMode
Preferences Affected: dom.security.https_only_mode

Examples

{
  "policies": {
    "HttpsOnlyMode": "allowed"
  }
}

JSON schema

{
  "type": "string",
  "enum": [
    "allowed",
    "disallowed",
    "enabled",
    "force_enabled"
  ]
}

Values

Value	Description
allowed	HTTPS-Only Mode is off by default, but the user can turn it on.
disallowed	HTTPS-Only Mode is off and the user can't turn it on.
enabled	HTTPS-Only Mode is on by default, but the user can turn it off.
force_enabled	HTTPS-Only Mode is on and the user can't turn it off.

Windows (GPO)

Software\Policies\Mozilla\Firefox\HttpsOnlyMode = "allowed", "disallowed", "enabled", "force_enabled"

macOS

<dict>
  <key>HttpsOnlyMode</key>
  <string>allowed | disallowed | enabled | force_enabled</string>
</dict>