15
edits
Changes
Jump to navigation
Jump to search
Line 50:
Line 50: + + +
added a paragraph about mandatory HSTS on the zone
[[Google]] won the auction over the other applicants, paying a winning bid of $25,001,000.<ref>[https://gtldresult.icann.org/application-result/applicationstatus/auctionresults Auction Results] ICANN.org, retrieved 02 March 2015</ref> The proceeds for the auction will go into a separate ICANN fund to be used for a designated purpose. The other applicants for the string must withdraw their applications for .app.<ref>[http://www.thedomains.com/2015/02/26/google-wins-the-new-gtld-app-for-25-million/ Google Wins the New gTLD .app for $25 Million] TheDomains.com, Retrieved 02 March 2015</ref>
[[Google]] won the auction over the other applicants, paying a winning bid of $25,001,000.<ref>[https://gtldresult.icann.org/application-result/applicationstatus/auctionresults Auction Results] ICANN.org, retrieved 02 March 2015</ref> The proceeds for the auction will go into a separate ICANN fund to be used for a designated purpose. The other applicants for the string must withdraw their applications for .app.<ref>[http://www.thedomains.com/2015/02/26/google-wins-the-new-gtld-app-for-25-million/ Google Wins the New gTLD .app for $25 Million] TheDomains.com, Retrieved 02 March 2015</ref>
=== mandatory HTTPS ===
.App and .dev are the first TLDs to make HTTPS mandatory on all websites in the zone by enforcing [https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security HSTS] compliance. Google maintains a list known as the [https://hstspreload.org/ HSTS Preload List] which is honored by Chrome and most other modern browsers. Anyone can submit their site to the list, which tells browsers: “insecure HTTP is disabled for this domain”. Non-HTTPS-protected sites on the list therefore not load at all, rather than the typical fallback behavior of displaying an insecure site. The entire .app zone has [https://hstspreload.org/?domain=app been added to the HSTS Preload List.]
==References==
==References==