Overview
The .dev and .app domains are owned by Google, which enforces HTTPS on them at the browser level to protect user data — this cannot be disabled. To avoid browser security warnings on a .dev or .app site, you must install an SSL certificate. This article explains why.
Why do .dev and .app domains force HTTPS?
The .dev and .app domains are owned by Google, which enforces HTTPS on both domains to enhance security and protect user data. This HTTPS enforcement is mandatory and cannot be disabled.
To avoid browser security warnings, you must install an SSL certificate.