kernel-error.dev

Static technical notes on HTTPS-only operation, TLS, and HSTS preload for .dev domains.

What kernel-error.dev is

kernel-error.dev is a concise reference maintained by Kernel-Error that explains how the .dev top-level domain was designed, why browsers enforce HTTPS for it, and how this policy contributes to dependable transport security for technical sites.

The site is static, publishes no scripts, trackers, or analytics, and mirrors longer background articles hosted on kernel-error.de.

.dev is HTTPS-only and HSTS-preloaded

The .dev namespace shipped with mandatory HTTPS from day one. Browsers preload the .dev suffix into their HSTS lists, which forces encrypted connections and blocks insecure fallbacks before any request leaves the device.

This is not a marketing slogan or a certification promise. It is simply the enforced baseline: plain HTTP cannot be negotiated, and certificates must pass routine browser validity checks.

Why the site exists

The goal is to document the reasons behind HTTPS-only operation, outline the relationship between HSTS preload policies and real-world browsing, and link to deeper reading on kernel-error.de for those who need more context.

For historical and operational context around RFC discussions related to mail and transport protocols, see rfc-ignorant.de.

Security facts about this publication

For general context about the maintainer, a neutral background on the origin of the surname is available at heidbreders.de.