Introducing .app domain names and how to secure them (Google I/O '18)

Introducing .app domain names and how to secure them (Google I/O '18)

.app, the web’s first secure-only open top-level domain (TLD) for mobile apps and developers, is launching on May 8. This in-depth technical talk covers use cases for .app domain names, HTTP Strict Transport Security (HSTS), best practices for secure website development, and the unique security benefits of .app domains thanks to TLD-wide HSTS.

Rate this session by signing-in on the I/O website here →

Watch more Chrome and Web sessions from I/O ’18 here →
See all the sessions from Google I/O ’18 here →

Subscribe to the Chrome Developers channel →

#io18 #GoogleIO #GoogleIO2018 event: Google I/O 2018; re_ty: Publish; product: Chrome – General; fullname: Ben McIlwain, Adrienne Porter Felt; event: Google I/O 2018;


  1. Jeong-hun Sin on July 29, 2021 at 8:50 pm

    Is taken?

  2. Tibi Stanescu on July 29, 2021 at 8:56 pm

    Google, thanks for making it extremely difficult to set up your .app domain.

  3. Mark Austin on July 29, 2021 at 8:57 pm

    30k in the first 3 minutes. More likely from awful registrar’s like godaddy gobbling them up and pricing them way above standard pricing.

  4. SL Coder Ego with Coding on July 29, 2021 at 8:59 pm

    Can’t I have a free one 😀

  5. Denis TRUFFAUT on July 29, 2021 at 9:03 pm

    Prealoading .app TLD looks great.
    Any news on releasing .meet TLD ? I heard they belong to Google ?

  6. Kyle McNally on July 29, 2021 at 9:12 pm

    You still should use the strict-transport-security header. The preload list only works for browsers that use it. What about requests for non-browser apps, like curl or wget?

  7. Walt Mitchell Sr on July 29, 2021 at 9:14 pm

    Just purchased Google domain and proud to be a part of Google experience thank you so much for your time and consideration.

  8. Jean Guillon on July 29, 2021 at 9:16 pm

    No need to buy a SSL certificate when using the new version of Google Sites, it comes with it.

  9. Ahtesham Ul Haq on July 29, 2021 at 9:17 pm

    what my mind saying ‘skip the talk and go buy some domains for investments’

  10. John Balvin on July 29, 2021 at 9:17 pm

    I dind’t understand how in that moment there was avaible a lot of websites on .app if that already lunched to public on the same day

  11. Prayudi Satriyo on July 29, 2021 at 9:20 pm

    Managed to grab a four-letter .app this morning, which is now connected to our Firebase project. Thank you!

  12. dzivri on July 29, 2021 at 9:40 pm

    Can these be flipped?