Bare domains get https:// prepended automatically.
Quiet zone is measured in modules; the spec says 4. Everything runs in this tab — nothing leaves the browser.