Primary Domain
Infrastructure
Within the Primary Domain facet, Infrastructure intelligence groups reporting by primary domain so readers can follow a focused area of internet infrastructure, governance, connectivity markets, or digital capital. The page brings together related articles, public evidence, institutions, companies, people, regional exposure, operating dependencies, and market context that may otherwise sit across separate category pages. It explains the domain, the likely actor class, the market or governance context, and the source material readers should use when comparing signals. Operators, analysts, and governance readers can see how the same domain appears across events, profiles, market shifts, public-source evidence, regional dependencies, and longer-cycle infrastructure decisions over time.
IETF
The Field That Meant More After the Handshake: TCP Window Scale
TCP kept a 16-bit receive-window field even after fast, long-distance paths needed far more than 65,535 bytes in flight. Window Scale did not enlarge that field. It made the handshake establish how each endpoint would interpret the field for the life of one connection.
Global Cloud Services
GitHub's Attestation Proves a Build Path, Not a Safe Binary
A valid signature can establish where a binary came from while leaving the deployment decision unresolved. GitHub’s artifact attestation becomes a security control only when the consumer tests the recorded build route against an explicit trust policy.
IETF
The Request Arrived Before the Handshake: TCP Fast Open's Replay Bargain
TCP Fast Open let a returning client put its first application bytes in the packet that asked to open a connection. The saved round trip was real, but so was the bargain: replay tolerance, cookie rotation, bounded pre-handshake work and reliable fallback became part of operating…
Global Regional ISP Trends
NQB Turns Low-Latency Broadband Into a Behavioural Contract
A gigabit access line can look idle while a short game update, voice packet or DNS reply waits behind a bursty upload at the home’s actual bottleneck. The new NQB standard offers a shallow queue, but only to traffic whose sending pattern can justify the privilege without turning…
IETF
The connection is larger than the path: Multipath TCP keeps one byte stream across several routes
A phone leaves an office with a live connection on Wi-Fi and reaches the street on cellular. Ordinary TCP ties that connection to one path. Multipath TCP can keep the application on one ordered byte stream while the endpoints add, retire and prioritise TCP subflows underneath it.…
IETF
When the Receiver Drew a Map: How TCP SACK Changed Loss Recovery
TCP once told a sender only where an uninterrupted stream ended. Selective acknowledgment added a second language: a compact map of the later bytes that had already arrived. That extra evidence changed loss recovery without changing who controlled the congestion window or when…
Global Regional ISP Trends
Hyperoptic coverage is not serviceable until the building says yes
A broadband map can colour an address as covered before anyone has secured the right to open the riser, use the shared duct or enter the corridor that leads to the flat. Hyperoptic’s own installation documents show why the useful unit of coverage is not the postcode but the…
IETF
How DNSSEC learned to prove a name does not exist
A signed answer can authenticate a record that is present. The harder design problem is authenticating the empty space where an attacker might otherwise hide a name, invent one or replace a truthful “no” with a forged response.
IETF
The quiet hour is only a forecast: ALTO makes traffic timing a published promise
A bulk transfer can wait for two in the morning. The harder question is why two in the morning should be cheaper at all. ALTO Cost Calendars let a network publish that expectation to an application. The calendar is useful precisely because it is not the network itself: it is an…
History
The Handshake That Had to Remember Its Previous Handshake: TLS Renegotiation
A TLS connection could be encrypted from end to end and still tell the server the wrong story about who had sent its first bytes. The renegotiation flaw of 2009 exposed a missing form of evidence: a new handshake needed to prove not only its own keys, but also which earlier…
Number Resource Society
The FAQ Answer Needs a Version Date
A frequently asked question looks like the lightest form of institutional writing. In practice, it can be the page a member reads before applying, changing details, relying on a benefit or choosing where to ask for help. When that answer has no visible date or predecessor…
North America Regional ISP Trends
BEAD awards do not become project cash until reimbursement clears
A fibre crew can finish a week's work while the contractor's payroll and the supplier's invoice fall due before the state has accepted the next BEAD payment trigger. The award may be valid, the construction eligible and the project economic, yet the subgrantee still has to…
IETF
The quarter-second bargain behind Happy Eyeballs
Happy Eyeballs turned dual-stack connection setup into a managed race. Its success lies in making path failure less visible to users; its cost is that the same success can make broken paths less urgent to repair.
Global Regional ISP Trends
RPKI’s Recovery Path Is Becoming a Routing Control Surface
A ROA is not useful merely because it exists. The operational result also depends on how repositories and validators move from delta to snapshot to fallback—and how long they trust a previously valid view when those paths fail.
History
The Address That Expired to Protect Its User: IPv6 Temporary Addresses
IPv6 privacy extensions did not make an address secret. They changed which address a host would prefer for its next conversation, how long that preference lasted, and when the identifier finally had to leave the interface.
IETF
Joining the group is no longer enough: SSM makes the receiver name the sender
Source-Specific Multicast turns a multicast join into a choice: the receiver must identify both the group it wants and the source it is willing to hear.
ICANN
The Public Query Became a Private Lead Machine: Register.com v. Verio
A daily list of newly registered domains looked like public infrastructure until Verio connected it to automated WHOIS queries and rapid sales calls. The resulting case is less a monument to web-contract doctrine than a practical warning about layered permission: public data, a…
Global Cloud Services Trends
Two Providers Receive 38.6% of Popular-Domain Mail. The Missing Metric Is Recoverability
Public DNS can show where a domain asks the Internet to deliver its mail. It cannot show how long that domain would take to leave.
Global Regional ISP Trends
Put the recovery circuit outside the failure it must repair
A network site is not locally controllable merely because its equipment is nearby. Control exists only if the people expected to restore the site can still reach, authenticate to, understand and change it after the production path has failed.
ICANN
When a DNS-Abuse Report Becomes Actionable—and What the Contract Still Does Not Order
The decisive step in ICANN's DNS-abuse regime is not the arrival of an allegation. It is the moment when available evidence supports a reasonable finding, after which a registrar or registry must act promptly—but still choose a remedy that fits its role, the harm and the risk to…