There's a number of rules around using https first/only. I recall that all .app domains only use https as well as any domain using HSTS. - https://www.eff.org/

There's a number of rules around using https first/only. I recall that all .app domains only use https as well as any domain using HSTS. - https://www.eff.org/https-everywhere/set-https-default-your-browser https://www.eff.org/https-everywhere/set-https-default-your-...