.app domains are, according to Gandi.net and other Resellers, "a security-focused space, meaning that HTTPS is required for all websites."[7] This is accomplished by including the .app top-level domain on the HSTS preload list, making HTTPS required on all connections to .app websites.