Skip to main content

Lead Report / History

One shared TLS gateway receives an early visible name token, selects one of several service chambers, and only then accepts a sealed application request
At a shared address, a TLS server had to choose a certificate before it could decrypt the HTTP request that named the intended site. Server Name Indication resolved that ordering problem by putting the name in the ClientHello—making virtual HTTPS practical while leaving the routing name visible before encryption began.

The Name TLS Had to Hear Before It Could Hide It: How SNI Made Shared HTTPS Possible

At a shared address, a TLS server had to choose a certificate before it could decrypt the HTTP request that named the intended site. Server Name Indication resolved that ordering problem by putting the name in the ClientHello—making virtual HTTPS practical while leaving the routing name visible before encryption began.

  1. A client terminal carries an amber sealed session-state capsule between server memory drawers and a server-held rotating key ring, with separate reconstruction and full-handshake paths

    The Memory the Server Sealed for Later: How TLS Session Tickets Made State Client-Carried

    A TLS server learned to put its own resumable memory into a sealed object and ask the client to bring it back. The arrangement saved per-client storage, but it did not abolish state: it concentrated acceptance in ticket keys, expiry rules and a fallback the server still controlled.

  2. A connection-opening signal carries early application data and an opaque cookie, with a replay echo and ordinary fallback lane.

    The Request Arrived Before the Handshake: TCP Fast Open's Replay Bargain

    TCP Fast Open let a returning client put its first application bytes in the packet that asked to open a connection. The saved round trip was real, but so was the bargain: replay tolerance, cookie rotation, bounded pre-handshake work and reliable fallback became part of operating the service.

  3. Copper header blocks appear before navy data in the upper tray and after the same conceptual data in the lower tray

    The Header That Waited Behind Its Data

    A variable-length header could stand between an arriving packet and a useful boundary in memory. In the early 1980s, BSD systems tried moving that obstacle: put the data first and its higher-level headers afterwards, then restore the ordinary arrangement at the receiver. Trailer encapsulation offered a way to save copying. Its harder problem was deciding when a sender knew enough about its neighbour to offer that help.

Member Access

Your daily intelligence edge starts here

Strategic Circle turns infrastructure moves, policy shifts and market signals into a concise briefing in your chosen language—plus the research library and member forum—for USD 20/month.

  • 01Daily intelligence brief
  • 02Governance + market + RIR
  • 03Preference control anytime

BTW Media on Air

Selected briefings, interviews, and live sessions from the BTW intelligence team, focused on internet infrastructure, governance, and market signals.

View All

The UK Didn’t Ban VPNs

The Deadline Passed — But the Deal Isn’t Over

“No Marketplace Fee” ≠ Free Software

Can Edge AI Keep Working When the Cloud Drops?

Your AI Can Change Without Going Offline

Why Fibre Internet Can Fail in a Power Cut

90% Fibre Coverage—But Your Home Could Still Be Left Out

$722 Million Gone—But Only on Paper

Your Company Card Was Charged. Who Approved It?

Fixed Shares, Moving Value

How a Cyberattack Became a Gas Shortage | Colonial Pipeline Explained

The Signature Is Valid. But Who Gave Permission?

16 Kbps on Paper. Just 80 bps in Practice.

How Can Zero Be Newer Than 4,294,967,295? DNS Serial Numbers Explained

Clicked Save. Nothing Happened—or Did It? | HTTP 204

An amber value query searches one bounded server while separate cyan DNS name trees remain outside its reach

Governance

The Answer That Could Only Name What One Server Knew: Why DNS Retired IQUERY

A DNS request once arrived with no question at all. Instead, it placed a resource record in the Answer section and asked the server to supply every name that matched it. The reversal looked elegant on paper: if an ordinary query mapped a name to a value, an inverse query would map the value back to names. But DNS had distributed its authority by names, not by every possible value stored beneath them. IQUERY could search one server’s memory; it could never establish that the server was the right place to ask or that its list was complete.

Two IPv6 packet variants encounter different parser depths along the same network path.

Market / Trends

IPv6 Extension Headers Are Becoming a Path-Compatibility Tax

The address answers. Ping works. Then the transport header moves 64 bytes deeper into an otherwise valid IPv6 packet, and the path goes quiet. Basic reachability survived; optional capability met the smallest parser on the route. It is a compact demonstration of how a protocol feature becomes somebody else’s hardware budget.

A vast scrubbing manifold removes red attack traffic while clean blue traffic narrows through two tunnels, a measurement prism and one customer handoff.

Market / Companies

A DDoS Scrubbing Contract Must Say Who Delivers the Clean Gigabit

A mitigation cloud can absorb an attack measured in terabits and still leave one customer's legitimate traffic dependent on a much smaller circuit, tunnel and router. The purchase decision is therefore not only how much hostile traffic the provider can discard. It is what clean traffic the contract obliges the whole delivery chain to carry, where that obligation is measured, and what happens when the platform is healthy but the protected service is not.

AI-generated editorial illustration showing a bespectacled man in a data centre beside Ceph distributed-storage nodes and block, object and file storage symbols.

Market

Sage Weil: The Architect Who Made Distributed Storage Calculable

Sage Weil’s most durable contribution to internet infrastructure was not a storage appliance but an architecture. Ceph used CRUSH to calculate where data belongs and RADOS to spread storage, repair and movement across a cluster. The design helped commodity machines behave like one storage system—and created an operational project that ultimately had to outgrow its founder.

An open legal folder holds NANOG's trademark, domain record, archives, contract and ledger while routers remain outside it.

Governance / NOGS

What, Exactly, Did NANOG Acquire?

NewNOG incorporated in 2010. The 2011 handoff then transferred named NANOG assets to that corporation, giving the forum a legal holder for its name and domain, archives, contracts and financial risk. It made NANOG more durable and its responsibilities easier to locate without making NANOG, Inc. the governor of the autonomous networks gathered around the forum.

Editorial position

Why BTW Media exists

  • Reality over advocacy
  • Evidence over sentiment
  • Systems over noise

Internet governance is too often described as theory, consensus, or institutional comfort while operators live with the consequences of structure, scarcity, jurisdiction, and incentives.

BTW shows how the system works when assumptions are tested: clear, uncomfortable, evidence-led reporting that keeps attention on structure rather than drama. Public reporting is published to travel: it may be indexed, quoted, translated, used in search and AI answers, and used to train models so the evidence can shape how infrastructure questions are understood.

Core Architecture

Governance, market, and membership branches operating in one integrated intelligence model.

Governance

  1. A Proposed Charter Is Not a Working Group Mandate
  2. The Command That Gave Away the Connection: Why SMTP Replaced TURN with ETRN
  3. The Timeout That Could Speak Only After Fragment Zero
  4. The Proposed RFC SLA Can Pass While Authors Still Wait
  5. The Bit That Could Not Keep a Service Running: Why DNS WKS Never Became a Live Directory
  6. An Expired Internet-Draft Is Not a Rejected Proposal
  7. The Number That Became Newer After Zero: How DNS Ordered Versions Without a Clock
  8. The Router That Pointed Sideways: How ICMP Redirect Stayed Local
  9. The Record the Receiver Could Not Hold: How TLS Made Size a Local Claim
  10. The Retraction That Had to Travel as News: How Usenet Made Cancellation a Local Decision
View Governance

Market

  1. From 200 Days to 47, TLS Renewal Becomes Runtime State
  2. The Zero-Egress Invoice Is Not the Cost of Leaving Scaleway
  3. The Denominator Behind the Uptime Promise
  4. The Default Slice Can Make a 5G SLA Look Healthy
  5. Equinix Fabric and the Limits of Programmable Interconnection
  6. Alkira: Building a Managed Network Across Clouds and Fibre
  7. CoreWeave's Network Must Turn Financed Capacity into Useful AI Uptime
  8. GitHub's Attestation Proves a Build Path, Not a Safe Binary
  9. Monitoring’s FTTH menu exposes where passive access ends and power responsibility begins
  10. Four AS Identities Around Internetmanufaktur Karlsruhe
View Market

Membership

  1. The Message That Chose Failure Over Cleartext
  2. ICANN Wrote a 24-Hour Disclosure Clock. Authentication Decides When It Starts
  3. The Relay That Added Context by Cutting Off the Message
  4. Two Registrations, One Phone
  5. The New Key That Inherited Its Past: What TLS KeyUpdate Could Rotate
  6. The 90-Day Emergency Policy That Kept Domain Registration Data Moving
  7. The Knock That Brought the Client Back
  8. The Link the Origin Asked to Remove: Why HTTP 410 Was Not 404
  9. The Row That Existed Before It Was Ready
  10. Sally Floyd and the Test That Throughput Alone Could Not Pass
View Membership

Number Resource Society

Reporting on address stewardship, representation, and the institutions shaping number-resource governance.

View Number Resource Society
  1. A Member Logo Is Not a Live Power of Attorney
  2. A Country Field Is Not an RIR Mandate
  3. An Unanswered Profile Needs a Reply-State Ledger
  4. The FAQ Answer Needs a Version Date
  5. When One Corporate Group Casts Twenty Registry Votes
  6. Digital Identity Requirements at the Registry Gate
  7. A Global South Label Cannot Substitute for a Mandate
  8. Bayan Telecommunications, AS6648 and the Boundary Between Network Records and Control

RIR Watchdog

Five regional sessions: ARIN, RIPE NCC, APNIC, AFRINIC, and LACNIC.

Network Operator Group (NOGs)

Operational intelligence from the communities where routing, peering, resilience, and deployment practice are tested.

View Network Operator Groups

History of the Internet

The internet's hidden roots in military strategy

Structural context for current governance behavior and infrastructure control models.

An amber request capsule is stopped at a barrier marked 425 before an incomplete handshake ring, while the same capsule passes after the ring closes

The Request That Had to Wait for Proof: Why HTTP Needed 425

TLS 1.3 let returning clients send requests before a new handshake finished. HTTP 425 made replayable early data wait without changing the request itself.

  1. The Receiver That Chose What Came First
  2. The Save That Left the Page Intact: HTTP 204
  3. The Address That Grew Old Before It Died
Open History Session

Leadership Alliance

Global AI summit launches as world enters implementation decade

Capital, policy, and institutional leadership alignment in cross-border digital systems.

One IPv4 datagram enters a splitter; three fragments emerge, but only the zero-offset fragment retains both option modules.

The Instruction That Had to Survive the Split

One IPv4 datagram entered a router with two options. Loose Source and Record Route, type 131, had its high bit set. Record Route, type 7, did not. When the router cut the datagram into three fragments, the zero-offset fragment kept both options; the other two kept only the source-route instruction. Their headers were deliberately unequal. One bit had separated state every fragment needed from state whose authority remained with the beginning.

  1. The Address That Needed a Local Footnote
  2. The Host That Learned a Small Routing Table: How IPv6 Ranked First Hops
  3. The Session Ticket Could Not Remember the Protocol
Open Alliance Session