14
Mar
2019

The .app Domain

Reading Time: < 1 minutes

After running around for a couple of weeks to get the DNS record created, we were asked to use the new top-level domain(TLD) .app .

I had not even heard of this domain until now 🤔. The .appTLD was purchased by Google back in 2015 and it opened it for general registration last year in May.

One nice requirement (and it caught me out initially) is that the domain must support HTTPS. Google has ensured this by getting the .app TLD included in the HSTS preload list. HSTS or HTTP Strict Transport Security is a web policy that works by sending a header field named “Strict-Transport-Security”. The user agent (browser) then knows that the site should only be accessed over https.

So even when the user enters http://example.com the browser will switch to https://example.com


HSTS

Print Friendly, PDF & Email
Share

You may also like...