Link is plain http for me. I thought all .dev domains were https?
If you go to http://yc.dev, you get an HTTP 307 (Internal redirect) to https://yc.dev.
https://get.dev/#benefits says: >The .dev top-level domain is included on the HSTS preload list, making HTTPS required on all connections to .dev websites and pages without needing individual HSTS registration or configuration.