.app is run by Google Registry and aimed at app makers and product sites. The whole TLD is on the HSTS preload list, which means every major browser will refuse to load an .app site over plain HTTP. You need a valid TLS certificate before the site can serve a single page.
Registry policy
| Field | Value |
|---|---|
| Registry | Google Registry |
| Registration period | 1 to 10 years |
| Renewal grace period | 30 days after expiry |
| Redemption period | 30 days after grace |
| Transfer lock | 60 days after registration or transfer (ICANN policy) |
Eligibility
Open.Features
- HTTPS-only. HSTS preload is enforced at the TLD level. There is no opt-out.
- WHOIS privacy. Free, applied by default.
- DNSSEC. Supported.
- IDN. Supported.
- Auth (EPP) code. Issued instantly from the domain panel.
Things to know
If the site renders blank with a certificate error, it’s almost always the TLS cert. Noxity hosting accounts auto-provision Let’s Encrypt for added domains, but if the domain points at an external server you’ll need to install your own cert before the site loads.Need a hand?
Open a ticket
Best for anything that needs an account check or a config change on our end.
Live chat
Faster for quick questions during business hours.