Content Type
Research
Within the Content Type facet, Research intelligence gathers BTW.MEDIA articles that share the same editorial format, helping readers compare briefings, profiles, risk notes, market analysis, and event coverage without mixing different kinds of evidence. The page explains how this content type frames internet infrastructure events, company movements, governance decisions, operational signals, and public evidence across the site. Readers can compare which actors or infrastructure systems appear most often, how source quality changes interpretation, and whether the material is a durable profile, a time-sensitive event, a strategic market signal, or a governance development. The result is a useful search page for operators, investors, customers, analysts, and policy stakeholders who need to understand the consequence, timing, and evidence behind similar article formats.
CASE FILE
The Packet Was Authentic. The Clock Was Still Wrong: NTS and the Authority of a Time Measurement
Two time servers answer the same machine. Both replies pass Network Time Security checks. Their offsets are 800 milliseconds apart. The cryptography has done its job, yet the operator's hardest question remains unanswered: which measurement, if either, may steer the clock?
CASE FILE
The route that came home wearing its own ASN
The route that came home wearing its own ASN intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The CASE FILE intelligence…
CASE FILE
The DNS ID Changed. The Old Rule Still Blocked Mail: MTA-STS and the Authority of a Cached Policy
At 09:00 a recipient added a backup MX to its HTTPS policy and changed the `_mta-sts` TXT `id`. One sender fetched the update. Another could not refresh and still held yesterday's unexpired `enforce` policy. Both resolved the same backup host; only one was permitted to use it.…
IETF
Final Review Is Not a Second Standards Vote
The release register showed an approved Internet-Draft, an open pull request and several author approvals still outstanding. Its operator compressed those facts into one alarming note: “the standard has been reopened for another vote.” The public record showed something more…
CASE FILE
Two paths, one hot link: governing BGP multipath
Two routes can be equally eligible, present in the forwarding table and still fail to share capacity in the way an operator expects. Multipath is permission to use a set of paths—not a promise about what the traffic inside that set will do.
CASE FILE
The Header Said DKIM Passed. It Did Not Say Who Ran the Test: Authentication-Results and the Authority of a Trust Boundary
Two messages arrive with the same line near the top: `Authentication-Results: mx.example; dkim=pass`. One line was written by the receiver after it checked the signature. The other was supplied by the sender before the SMTP connection began. A downstream rule sees identical…
CASE FILE
The Certificate Was the Same. The Service Name Was Not: DANE TLSA and the Authority of a Port-Bound Assertion
The certificate chain was identical on two listeners. One DANE-aware client accepted it; the other rejected it. Nothing cryptographic had changed inside the certificate. The selected service had changed, and the DNS assertion was never written for that second port.
CASE FILE
BGP’s quiet instruction: who gets to prefer an exit?
LOCAL_PREF can send traffic towards a longer path without telling an external neighbour why. Its power lies in the local policy behind the number—and in whether that policy survives the journey from a border router to actual packets.
IETF
Eric Vyncke and the Probe Label That Could Not Confer Trust
An unsolicited packet arrives before its explanation does. Eric Vyncke’s work on RFC 9511 asks whether a measurement sender can make that first encounter less opaque without demanding a new protocol, a central registry or automatic trust—and answers by drawing a hard line between…
Story
LACNIC’s RDAP Last Changed Event Dates the Registry Record, Not the Network Handover
A timestamp in a registration record can anchor an investigation, but it cannot substitute for the event the investigator actually needs to prove. LACNIC’s live RDAP data makes that boundary unusually visible: a network entity and the entities embedded inside it carry different…
Global Cloud Services
Datadog’s Observability Pipelines Move the Cost Cut Upstream
Datadog offers a way to reduce telemetry volume before it leaves a customer’s environment. That can lower a downstream bill, but it also moves the authority to discard operational evidence to a point where a later search cannot recover it.
Global Cloud Services
A DDoS Scrubbing Contract Must Say Who Delivers the Clean Gigabit
A mitigation cloud can absorb an attack measured in terabits and still leave one customer's legitimate traffic dependent on a much smaller circuit, tunnel and router. The purchase decision is therefore not only how much hostile traffic the provider can discard. It is what clean…
IETF
The Timer the Peer Could Hear: TCP User Timeout Without Negotiated Patience
One TCP endpoint could decide how long unanswered data was worth keeping, but the other endpoint could not hear that decision. RFC 5482 put the timeout on the wire as advice. The difficult part was preserving the distinction between a useful warning and a promise neither side had…
Africa National Telecom
A Tower Sale Does Not Sell the Power Bill
Selling passive mobile infrastructure can release capital and move steel, shelters and site operations to a tower company. It does not answer who pays when diesel rises, a generator burns too much fuel, a ground lease lapses or an uptime target is missed. Those outcomes live in…
Global Regional ISP Trends
IPv4-as-a-Service Makes Translation State an Operating Contract
An IPv6-only access line can look perfectly healthy while one old application, one literal IPv4 address or one changed resolver loses the IPv4 Internet. IPv4-as-a-Service saves scarce addresses by moving compatibility into a chain of synthesis and translation; it also moves the…
ICANN
When a Registration-Data Request Becomes Urgent—and What the New Clock Still Does Not Authorize
ICANN’s new urgent-request timetable can make a registrar answer faster. It cannot turn urgency into an automatic right to private data. The policy times acknowledgement and decision; authentication, necessity, legal basis and the merits of disclosure remain separate questions.
IETF
The Field That Meant More After the Handshake: TCP Window Scale
TCP kept a 16-bit receive-window field even after fast, long-distance paths needed far more than 65,535 bytes in flight. Window Scale did not enlarge that field. It made the handshake establish how each endpoint would interpret the field for the life of one connection.
Global Cloud Services
GitHub's Attestation Proves a Build Path, Not a Safe Binary
A valid signature can establish where a binary came from while leaving the deployment decision unresolved. GitHub’s artifact attestation becomes a security control only when the consumer tests the recorded build route against an explicit trust policy.
IETF
The Request Arrived Before the Handshake: TCP Fast Open's Replay Bargain
TCP Fast Open let a returning client put its first application bytes in the packet that asked to open a connection. The saved round trip was real, but so was the bargain: replay tolerance, cookie rotation, bounded pre-handshake work and reliable fallback became part of operating…
Number Resource Society
A Member Logo Is Not a Live Power of Attorney
The Number Resource Society’s membership page makes an important distinction in its headings: one gallery is for members said to have entrusted NRS with representation in RIR matters, while another presents the wider member community. The distinction should also be carried by the…