AFRINIC saga currently tracked end-to-end.
Governance / Case File
CASE FILE
Case File governance intelligence tracks institutions, policy processes, standards activity, registry operations, accountability disputes, and implementation signals that affect internet infrastructure. BTW.

Institution legitimacy and continuity risk mapping.
Primary-source based timeline and risk analysis.
Used for continuity and policy exposure planning.
Latest Coverage
Latest from CASE FILE
759 articles

CASE FILE
An IXP Classifier Cleared 90% on Tested Exchanges. That Is Not a Global Map
A new model can distinguish route-server exchange from bilateral interconnection with better than 90% accuracy on the exchanges used for its transfer test. That is a promising result. The public record still needs to say which exchanges, relationships and errors sit behind the…

CASE FILE
Let’s Encrypt’s 99.21% IP-Certificate Signal Came From Three Days
A new study found Let’s Encrypt behind 99.21% of the IP certificates in one July 2026 stream. Its full-year 2025 data put ZeroSSL first. The apparent reversal is useful news, but only if the time window, counting unit and attribution chain travel with the percentage.

CASE FILE
The Stream Was Created. The Broadcast Was Not: RFC 9725
A WHIP endpoint can return `201 Created` while the programme remains black. RFC 9725 makes low-latency contribution easier to start; it also makes it essential to distinguish the HTTP resource from the media path, the production chain and the audience result.

CASE FILE
RFC 9727 Put the APIs in a Catalog. It Did Not Put the Catalog in Charge
The most dangerous API inventory can be perfectly formatted. Its links validate, its cache is warm, and its obsolete interface is gone from the list. None of those facts says what is still listening on the network.

CASE FILE
The Resource Disappeared. So Did the Diagnosis: RFC 9729’s Concealed Authentication Boundary
Concealed authentication removes a useful signal from an intruder: the server no longer has to advertise a challenge before an authorized client can prove itself. The same silence can also erase the evidence an operator needs when a key is revoked late, a gateway exports the…

CASE FILE
The Log Filter Made Tomorrow’s Evidence Decision
RFC 9742 gives network operators a common language for configuring syslog. The harder question is whether that language preserves the particular evidence an incident will make valuable.

CASE FILE
RFC 9744: the circuit identities a shared tunnel must retain
Fewer service labels can make a carrier network cheaper to operate. The saving becomes less convincing when the remote edge can no longer tell which customer circuit needs a different path.

CASE FILE
RFC 9746: the compatibility cost of choosing EVPN split horizon
A default-method entity can send an upgraded Ethernet segment back to its encapsulation baseline. The operational question is whether the network has kept the resources and evidence needed to make that return safely.

CASE FILE
RFC 9747: the neighbour returns a packet, not a health declaration
Unaffiliated BFD Echo removes the need for the far end to speak BFD. That useful simplification leaves the local operator owning both the test and the decision made from its result.

CASE FILE
The Private Number Was Valid. The Instruction Was Still Unowned: RFC 9752
A vendor payload can cross a stateful PCEP session with a real enterprise number and perfect framing while leaving the decisive questions unanswered: who published its meaning, what the PCC was allowed to do, what the device installed, and what the traffic experienced.

CASE FILE
The Message Continued. The Constraint Went Missing: RFC 9753
RFC 9753 lets stateful PCEP peers keep working when selected entities are optional. That is a useful availability mechanism. It is not evidence that the ignored meaning survived, that the replacement LSP is equivalent, or that forwarding remained safe.

CASE FILE
The Server Accepted the Message. The User Still Could Not Find It.
RFC 9755 gives IMAP a precise UTF-8 handshake, but a capability banner and a successful APPEND are only the first receipts in a much longer chain from stored octets to usable mail.

CASE FILE
The Controller Said Done. The Packets Had Not Testified: RFC 9757
RFC 9757 gives a PCE an experimental vocabulary for coordinating Native IP paths, but its acknowledgements end inside the controller–client conversation. Leadership still needs independent proof that BGP, routing policy, forwarding hardware and live traffic enacted the same…

CASE FILE
The Receipt Behind the Cipher: What RFC 9771 Makes AEAD Buyers Prove
An authenticated-encryption label can be correct and still leave the decisive deployment question unanswered. RFC 9771 gives operators the vocabulary to distinguish a mathematical property, an implementation convenience, and an interface with different security rules. The next…

CASE FILE
A Million Government URLs Can Show Dependency. They Cannot Prove Who Chose It
A new cross-country study compares the companies behind government websites with those serving commercial sites. Its distinction between market-shaped and government-specific concentration is a useful diagnostic. But an infrastructure measurement cannot identify the official who…

CASE FILE
Britain’s Under-18 Nude-Image Plan Crosses Devices and Apps. Its Duty Map Is Still Missing
The UK government says it will legislate so under-18s cannot take, view or send nude images, with protection extending from cameras to third-party apps. That is a whole-system objective announced before the whole system of duties. Until a bill assigns each action, signal, handoff…

CASE FILE
The FTC Withdrew a Health-App Statement, Not the Breach Rule
A one-page withdrawal can produce a dangerously large misunderstanding. On 9 September, the US Federal Trade Commission rescinded a 2021 policy statement about health apps and connected devices. It did not say that the Health Breach Notification Rule had disappeared. The…

CASE FILE
Ofcom’s NCII Hash Programme Separates Detection From Judgment
The most important word in Ofcom’s new intimate-image-abuse measure is not “hash”. It is “judgment”. A digital fingerprint can tell a service that an uploaded image resembles material represented in a database. It cannot, by itself, establish consent, context or every element of…

CASE FILE
The Flag Field Was Extended. No Prefix Property Had Been Defined: RFC 9792
RFC 9792 made room for future OSPF prefix facts without claiming that any such fact yet existed. That small act of restraint creates a useful test for every routing-control assertion: identify the container, the assigned bit, the sender's bytes, the receiver's rule and the…

CASE FILE
California’s AI-Audit Laws Separate Registration From Verification
California has enacted two gates for a market that promises to check artificial-intelligence systems. One law will require people selling covered AI audits to enter a public registry and follow conduct rules. The other tells the state to decide which auditors merit the more…
Member Unlock
Restricted Profile Intelligence
Login is required to unlock full profile briefings and deep-dive sections.
Strategic Circle Briefing
Join to unlock strategic briefings after signing in.
Join Strategic CircleLeadership Alliance Briefing
For qualified IP-asset owners and management; sign in to unlock alliance briefings.
Join Leadership AllianceSession Map
Active Dossiers
AFRINIC Saga
Multi-year governance and legal crisis with implications for RIR accountability worldwide.
Open AFRINIC Saga