So the relay is the bridge between browsers and the DHT, and https://relay.pkarr.org is used as a default? 

So a web app still relies on 2 ICANN domains (app + relay), right?