The "magic" is that the TLD is reserved for internal use. Before, people used different domains like ".lan", ".local". Problem with those is that it can happen at any time that one of these becomes a valid TLD which can cause a lot of unexpected side effects (starting from "cannot reach somenicepage.lan because my local DNS resolved *.lan" to "someone registered server.lan and can not issue valid SSL certificates for my internal service").