Time Horizon
Multi-year
Within the Time Horizon facet, Multi-year time-horizon intelligence organises articles by the period over which a signal is expected to matter. The page helps readers distinguish immediate operational changes from longer-cycle governance, investment, standards, and infrastructure shifts that may unfold across quarters or years. It connects timing assumptions with public evidence, related actors, market context, customer exposure, policy pressure, and infrastructure planning so readers can judge whether a development is urgent, strategic, or still waiting on confirming evidence. The page also explains how time horizon changes the meaning of a signal, which organisations may be exposed, and which infrastructure decisions require short-term action or long-cycle monitoring.
Global Cloud Services
GitHub's Attestation Proves a Build Path, Not a Safe Binary
A valid signature can establish where a binary came from while leaving the deployment decision unresolved. GitHub’s artifact attestation becomes a security control only when the consumer tests the recorded build route against an explicit trust policy.
IETF
The Request Arrived Before the Handshake: TCP Fast Open's Replay Bargain
TCP Fast Open let a returning client put its first application bytes in the packet that asked to open a connection. The saved round trip was real, but so was the bargain: replay tolerance, cookie rotation, bounded pre-handshake work and reliable fallback became part of operating…
Leaders
Aaron Wendel and What Two Failed ARIN Proposals Reveal About Operator Power
Fourteen years apart, two public tallies put Aaron Wendel on the losing side of consequential debates about Internet number resources. The defeats are more revealing than a conventional success story: they show how practical operating knowledge enters policy, how commercial…
Story
LACNIC Turns IPv4 Value Into a Chain of Proof
An IPv4 block may attract a price, but a board cannot rely on that value until authority, eligibility and the registry change can survive diligence.
ICANN
The Takedown Notice Did Not Become a Verdict: Petroliam Nasional v. GoDaddy
The Ninth Circuit did not call every registrar passive or every takedown request futile. It drew a narrower, more useful line: a service provider's ability to maintain and forward a domain name does not create an unwritten ACPA claim that turns notice into adjudicatory authority.
Global Cloud Services Trends
From 200 Days to 47, TLS Renewal Becomes Runtime State
Public TLS certificates are getting shorter. The consequential change is not a busier expiry calendar; it is that authority, issuance, deployment and external verification must now behave like one continuously observed production system.
Global Regional ISP Trends
NQB Turns Low-Latency Broadband Into a Behavioural Contract
A gigabit access line can look idle while a short game update, voice packet or DNS reply waits behind a bursty upload at the home’s actual bottleneck. The new NQB standard offers a shallow queue, but only to traffic whose sending pattern can justify the privilege without turning…
IETF
When the Receiver Drew a Map: How TCP SACK Changed Loss Recovery
TCP once told a sender only where an uninterrupted stream ended. Selective acknowledgment added a second language: a compact map of the later bytes that had already arrived. That extra evidence changed loss recovery without changing who controlled the congestion window or when…
History
The Header That Waited Behind Its Data
A variable-length header could stand between an arriving packet and a useful boundary in memory. In the early 1980s, BSD systems tried moving that obstacle: put the data first and its higher-level headers afterwards, then restore the ordinary arrangement at the receiver. Trailer…
Global Regional ISP Trends
Hyperoptic coverage is not serviceable until the building says yes
A broadband map can colour an address as covered before anyone has secured the right to open the riser, use the shared duct or enter the corridor that leads to the flat. Hyperoptic’s own installation documents show why the useful unit of coverage is not the postcode but the…
IETF
How DNSSEC learned to prove a name does not exist
A signed answer can authenticate a record that is present. The harder design problem is authenticating the empty space where an attacker might otherwise hide a name, invent one or replace a truthful “no” with a forged response.
History
The Handshake That Had to Remember Its Previous Handshake: TLS Renegotiation
A TLS connection could be encrypted from end to end and still tell the server the wrong story about who had sent its first bytes. The renegotiation flaw of 2009 exposed a missing form of evidence: a new handshake needed to prove not only its own keys, but also which earlier…
History
A Map Pin Was Not a Measurement
DNS LOC could express a coordinate to a thousandth of an arcsecond while declaring a horizontal error circle ten kilometres across. That was not a contradiction. The format distinguished the fineness of an address on a map from the strength of the knowledge behind it. A consumer…
Story
At LACNIC, the Most Valuable IPv4 Option Is Waiting
At LACNIC, the Most Valuable IPv4 Option Is Waiting intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The Story…
IETF
Joining the group is no longer enough: SSM makes the receiver name the sender
Source-Specific Multicast turns a multicast join into a choice: the receiver must identify both the group it wants and the source it is willing to hear.
ICANN
The Public Query Became a Private Lead Machine: Register.com v. Verio
A daily list of newly registered domains looked like public infrastructure until Verio connected it to automated WHOIS queries and rapid sales calls. The resulting case is less a monument to web-contract doctrine than a practical warning about layered permission: public data, a…
Global Institutional Trends
At DE-CIX, the Route Server’s Default Is a Market Rule
One BGP session can replace hundreds of bilateral introductions. That efficiency is real, but so is the delegation hidden inside it: the route server’s defaults, filters and exceptions help decide who can reach whom, under which evidence, and at whose operational cost.
CASE FILE
The Certificates Did Not Expire: Chrome's Entrust Cutoff Turned Trust Into an Operating Licence
The decisive field was not the expiry date printed inside a TLS certificate. It was the timestamp proving when that certificate entered the public record—and whether Chrome still accepted the authority behind it at that moment.
History
Eight Bytes the Endpoints Could Not Negotiate Away
A PPPoE session could open successfully without carrying the packet size that justified opening it. The extension that addressed this problem separated permission, negotiation and a size-sensitive fallback. Its historical importance lay in a broadband migration: when the session…
Story
At LACNIC, a New ISP Must Prove Need Before It Can Pay $8,000 for IPv4
LACNIC’s rules ask a first-time operator to show that customers and equipment already justify an address block. Exhaustion then sends that approved need into a private market. The rule is neutral on paper; the sequence is not neutral between a network starting from zero and one…