Live data from Hacker News

Introducing .app, a more secure home for apps on the web

blog.google

201–210 of 378 posts

Re: Introducing .app, a more secure home for apps on the web

#201

Earlier quoted context omitted.

Godaddy enables you to preregister at the moment. This is only a preorder and doesn't guarantee the domain.

You can register a domain name at this moment during the Early Access Period through any registrar which supports it (which includes GoDaddy and many others listed at https://www.registry.google/about/register.html ). It's not a pre-registration; the domain is created and assigned to you immediately.

To be blunt, this is a horrible roll-out by Google. It is a perfect example of the right hand not talking to the left hand, or the rest of the body for that matter. Several significant issues:

1) The announcement is made by Google, yet Google is not accepting EAP registrations. Very confusing.

2) The registrars accepting EAP are not as widely known as you would expect for something like this, meaning that I am going to have to pay to registrar now and then a transfer fee to transfer to my primary register down the road.

3) GoDaddy is listed as an EAP registrar, however, they are only accepting pre-registrations at this time. On top of that, they found a way to be even more shady by charging a $173.99 for "Priority Pre-Registration".

Re: Introducing .app, a more secure home for apps on the web

#202
Just for fun, I tried these domain names via the url get.app:

apple.app

facebook.app

instagram.app

twitter.app

ycombinator.app *

snapchat.app *

producthunt.app *

whatsapp.app

amazon.app

microsoft.app

google.app

hotmail.app *

dropbox.app

intercom.app *

pivotal.app *

tesla.app

dell.app

ibm.app *

* AVAILABLE

Re: Introducing .app, a more secure home for apps on the web

#203

I want to clarify some details on how the Early Access Program (EAP) works because I'm seeing some confusion here in the comments. EAP is a 7-day period in advance of General Availability (GA) during which domains can be registered immediately (not pre-ordered). EAP is a descending price ("Dutch") auction, meaning that prices start off high and then decrease as the auction goes on. The reason for this is to efficient…

[deleted]

Re: Introducing .app, a more secure home for apps on the web

#204
post #185

I wish Google or someone else with a lot of money would go and register every word in the English dictionary and then sell domains for reasonable prices. And there should also be a rule against domain squatting, for example only allow five domains per person/company.

What if we just sell TLDs directly to consumers?

Re: Introducing .app, a more secure home for apps on the web

#205

I was not aware .google was a tld. Can any company get a tld made? Who's even in charge of that sort of thing?

yes, any company willing to pay the application fee of $185k and able to pass a review as "capable" of operating a TLD can register a TLD. ICANN is in charge of it.

https://newgtlds.icann.org/en/about/program

Re: Introducing .app, a more secure home for apps on the web

#206

Earlier quoted context omitted.

Godaddy enables you to preregister at the moment. This is only a preorder and doesn't guarantee the domain.

You can register a domain name at this moment during the Early Access Period through any registrar which supports it (which includes GoDaddy and many others listed at https://www.registry.google/about/register.html ). It's not a pre-registration; the domain is created and assigned to you immediately.

There has to be an error somewhere on a couple registrars. Trying through 101Domain adding a domain to the cart results in a total of $12,025.16 USD. I can get it slightly cheaper at Yay.com for $10,209.09.

Re: Introducing .app, a more secure home for apps on the web

#207

I want to clarify some details on how the Early Access Program (EAP) works because I'm seeing some confusion here in the comments. EAP is a 7-day period in advance of General Availability (GA) during which domains can be registered immediately (not pre-ordered). EAP is a descending price ("Dutch") auction, meaning that prices start off high and then decrease as the auction goes on. The reason for this is to efficient…

Both pricing mechanisms are great at:

(a) transferring wealth from the secondary market to registrars, and

(b) guaranteeing that desirable domain names get allocated purely on economic value terms, thus effectively shutting out non-profit-oriented enterprises from the best domain names. If someone with some quirky desire to name a domain name after their cat would like to grab the domain name and refuse to sell, this pricing scheme guarantees that such sentimental value counts for zero in the "efficient allocation" measure.

Both of these seem pretty shitty to me.

Re: Introducing .app, a more secure home for apps on the web

#208

I want to clarify some details on how the Early Access Program (EAP) works because I'm seeing some confusion here in the comments. EAP is a 7-day period in advance of General Availability (GA) during which domains can be registered immediately (not pre-ordered). EAP is a descending price ("Dutch") auction, meaning that prices start off high and then decrease as the auction goes on. The reason for this is to efficient…

Both pricing mechanisms are great at: (a) transferring wealth from the secondary market to registrars, and (b) guaranteeing that desirable domain names get allocated purely on economic value terms, thus effectively shutting out non-profit-oriented enterprises from the best domain names. If someone with some quirky desire to name a domain name after their cat would like to grab the domain name and refuse to sell, this…

Desirable domains are by definition scarce -- there is not enough of them to go round to those who desire them.

The current approach is essentially saying "if you really desire domain X badly, put your money where your mouth is".

Do you have an alternative proposal on how these desirable domains could be allocated more efficiently?

Re: Introducing .app, a more secure home for apps on the web

#209

Earlier quoted context omitted.

I would assume one is for early phase registration (101domains - May 1-7), and one is general registration (gandi - May 8). If the domain isn't registered in the early phase, you'll be in line to have it registered on May 8.

It looks like it, indeed. I was confused because gandi and 101domains did not explicitly state the phase. And gandi took my money and deducted it from my account but apparently did not actually obtain the domain yet.

[deleted]

Re: Introducing .app, a more secure home for apps on the web

#210

Earlier quoted context omitted.

What is the "single source of truth" for the HSTS preload list? It must be on a server somewhere... who runs the server? Which browsers use this list by default?

See https://hstspreload.org/ . And all major browsers. Chrome, Firefox, Safari, Opera, IE, and Edge for starters.

Thanks for that. But that site doesn’t seem to mention the loading process across browsers. Generally speaking , do the major browsers ship the HSTS list compiled into the build? Or do they update it at runtime? If so, from where do they fetch the updated list, and how often?
Post reply on HN