Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Introducing .app, a more secure home for apps on the web

blog.google

Post reply on HN
Print view View original

91–100 of 378 posts

Re: Introducing .app, a more secure home for apps on the web

#91

Post by coolspot »

chatmasta wrote: post #8

If it’s not clear from the article, HTTPS is required for all .app domains, which Google accomplished by adding the .app TLD to the default chrome HSTS preload list. Interestingly that will only ensure HTTPS only when using a browser with HSTS enabled with a preload list that includes the .app TLD. Therefore non-web code, or code in browsers without the TLD in the HSTS preload list, will be able to make HTTP requests…

"embrace/extend/extinguish" is Microsoft's invention [1].

What are examples of Google's use of EEE?

[1] https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...

Re: Introducing .app, a more secure home for apps on the web

#92

Post by majewsky »

limeblack wrote: post #88

Not surprisingly Google has already prevented registration(pre pre registration) of anything related to their services alphabet[1], chrome[2], chromeos[3], etc... I guess you can do whatever you want when you own the domain extension. [1] https://www.godaddy.com/dpp/find?checkAvail=1&tmskey=&domain... [2] https://www.godaddy.com/dpp/find?checkAvail=1&tmskey=&domain... [3] https://www.godaddy.com/dpp/find?checkAvail=1…

Not sure why this is surprising to you. Of course I'll protect against namesquatting if I have the right to first dibs.

Re: Introducing .app, a more secure home for apps on the web

#93

Post by ocdtrekkie »

coolspot wrote: post #91
chatmasta wrote: post #8

If it’s not clear from the article, HTTPS is required for all .app domains, which Google accomplished by adding the .app TLD to the default chrome HSTS preload list. Interestingly that will only ensure HTTPS only when using a browser with HSTS enabled with a preload list that includes the .app TLD. Therefore non-web code, or code in browsers without the TLD in the HSTS preload list, will be able to make HTTP requests…

"embrace/extend/extinguish" is Microsoft's invention [1]. What are examples of Google's use of EEE? [1] https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...

It was Microsoft's strategy roughly twenty years ago. It's Google's strategy today.

Re: Introducing .app, a more secure home for apps on the web

#96

Post by landric »

mar225 wrote: post #63
ted0 wrote: post #14

Earlier quoted context omitted.

Preregistrations don't really mean anything. We only do GA launches, which is on May 8.

So would someone be able to register on namecheap and have a chance at a .app domain against someone that used priority pre-registration at godaddy?

The GoDaddy thing is basically, "Pay us extra and we'll click for you automatically on May 8th." It's like paying Southwest Airlines $15 to check you in right at t-minus 24 hours before your flight...

Re: Introducing .app, a more secure home for apps on the web

#98

Post by lambda »

CydeWeys wrote: post #71
lambda wrote: post #64

Earlier quoted context omitted.

Is there a list of which registrars are participating in the early access period? None of the ones I tried seemed to recognize .app.

See https://www.registry.google/about/register.html -- the ones supporting EAP are annotated as such.

Ah, looks like the registrars were still coming online when I tried. When I first tried Gandi, it didn't seem to like .app, but now it does and lets me choose "landrush," which I assume is the way to buy a domain during the EAP.

Re: Introducing .app, a more secure home for apps on the web

#99

Post by the4004 »

ted0 wrote: post #6

Ted from Namecheap here - we've been excited about this TLD launch for a couple of years now and we plan to sell .app domains! Stoked it's launching very soon.

I just went onto one of the EAP registrars website and spoke with a 'domain consultant'.

This individual assured me for today our available .app domain can be registered and fully usable for $11999. Tomorrow the price goes down to $2999 or something like that.

How is this possible if Landrush is only a preregistration expression of interest?

Re: Introducing .app, a more secure home for apps on the web

#100

Post by the4004 »

sabertoothed wrote: post #95

It is very strange. 101domains wanted to charge me ~13,000 USD for a domain / year. gandi, however, allowed me to purchase it (the same domain!) for ~650 GBP / year. What is going on?

I noticed this too. Has the domain actually been registered with Gandi yet?

Maybe 13k gets you a fully registered domain, and the £650 is like buying an option or a chance to be in the running.

Post reply on HN