Microsoft uses two high-volume redirection services for links between client software and websites:

   aka.ms
   go.microsoft.com

Both of these domains are heavily used and, because they often point to Downloads or pages that require login, they are high-value targets for a MITM attacker.

We request that you update transport_security_state_static.json with the following entries: 

    { "name": "aka.ms", "policy": "custom", "mode": "force-https", "include_subdomains": true },
    { "name": "go.microsoft.com", "policy": "custom", "mode": "force-https", "include_subdomains": false },

Verification:
If you'd like to further verify this request, feel free to ping me via ericlaw@microsoft.com. aka.ms presently serves the HSTS Preload header with the includeSubdomains directive. go.microsoft.com was manually added to Edge's fork of the HSTS preload list in the stable build of Windows 10 (shipped April 2018) and that can be verified via observation if desired.

Note: aka.ms requests includeSubdomains:true while go.microsoft.com requests includeSubdomains:false.