+ <string id="DisableEncryptedClientHello">Disable Encrypted Client Hello</string>
+ <string id="DisableEncryptedClientHello_Explain">If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled.
+
+If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled.</string>
+ <string id="PostQuantumKeyAgreementEnabled">Enable post-quantum key agreement</string>
+ <string id="PostQuantumKeyAgreementEnabled_Explain">If this policy is enabled, post-quantum key agreement for TLS will be enabled.
+
+If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled.</string>
+ <string id="HttpsOnlyMode">HTTPS-Only Mode</string>
+ <string id="HttpsOnlyMode_Explain">If this policy is enabled, you can set the default behavior for HTTPS-Only Mode.
+
+If this policy is disabled or not configured, HTTPS-Only Mode is not enabled.</string>
+ <string id="HttpsOnlyMode_Allowed">Off by default</string>
+ <string id="HttpsOnlyMode_Disallowed">Off and locked</string>
+ <string id="HttpsOnlyMode_Enabled">On by default</string>
+ <string id="HttpsOnlyMode_ForceEnabled">On and locked</string>
+ <string id="HttpAllowlist">HTTP Allowlist</string>
+ <string id="HttpAllowlist_Explain">If this policy is enabled, you can specify a list origins that will not be upgraded to HTTPS.
+
+If this policy is disabled or not configured, all origins are upgraded to HTTPS if HTTPS-Only Mode is enabled.</string>