Policy continuity, legitimacy, and accountability signals across internet governance institutions.
Governance
Governance
Internet governance intelligence tracks institutions, policy processes, standards activity, registry operations, accountability disputes, and implementation signals that affect internet infrastructure. BTW.
RIR WatchdogCase FileNumber Resource SocietyICANNIETFHistory of InternetNOGs
RIR Watchdog, Case File, NRS, ICANN, IETF, History of Internet, and NOG sessions.
Coverage prioritizes implementation evidence and institutional behavior over declarative positions.
Latest Coverage
Latest from Governance
7,636 articles
CASE FILE
When a BIND Fix Is Not Yet a Repair
A resolver vulnerability becomes an institutional accountability test when the patch is available but the evidence of recovery is not. ISC’s public record establishes how two BIND failures can turn hostile DNS input into an availability risk—and identifies a remediation…
IETF
The Hidden Service Answered. The Onion Key Had Not Yet Spoken: RFC 9799
The hidden service answered over Tor, the ACME account was valid, and the final CSR was ready. None of those facts yet proved that the applicant controlled the `.onion` identity. RFC 9799 makes that missing proof explicit—and shows why issuance authority, descriptor visibility…
ICANN
ICANN Kept Its Strategy Unchanged Without Showing the Trigger Test
ICANN’s latest annual strategy review ended with a clear Board decision and an incomplete public chain of reasoning. After eight environmental-scan sessions involving nearly 210 entities, the Board affirmed on 6 September that its FY26–30 Strategic Plan would remain unchanged.…
IETF
IETF–W3C: A Relationship Record, Not a Single Institution
The label “IETF–W3C” compresses two standards institutions into one directory entry. The public record supports a narrower description: the organizations have documented channels of cooperation, but the evidence reviewed does not establish one legal entity, one administrative…
IETF
A Company-Certs Endpoint Cannot Prove Who Approved a Trust-Anchor Rollover
At 10:00, an application retrieves two valid private-CA chains from its company’s well-known HTTPS endpoint. The older chain still works; the newer chain has the later `valid_from`, so the client selects it exactly as the draft describes. TLS validation passed, the JSON parsed…
Story
LACNIC Listed 32 Resources for December Revocation. That Is Not 32 Cases.
A new LACNIC cohort places 32 number-resource records on one 90-day clock. The table is useful precisely because it is public. Its limit is just as important: a row identifies a resource, not the recovery case behind it.
IETF
The Cursor Knew the Position. It Did Not Know the Moment
YANG list pagination can preserve the exact filter, sort field, locale, direction and continuation token used to reach the next page. That makes the traversal auditable. It does not make nine requests one observation, or an ordered page a frozen dataset.
Story
APNIC Closed Its CentOS Workstream. The Evidence Chain Still Has Four Open Joins
APNIC can point to a genuine finish line: in the second quarter of 2026 it completed a multi-year move away from end-of-life CentOS hosts. Its wider security record is less linear. Tests, findings, classifications and exercises appear in separate reports, but the public evidence…
History
One Packet Became Several Frames, and Several Packets Became One: RFC 1993
RFC 1993 recorded a compression design in which the most intuitive boundary on a serial link—the frame edge—stopped being the boundary that mattered. Its Gandalf FZA stream could gather several original PPP packets into one compressed frame or carry a single original packet…
History
The State Table Was Also a Kill Switch: RFC 2012
In RFC 2012, a manager could inspect a TCP connection in one moment and erase its host-side existence in the next. The same row that reported state also accepted `deleteTCB(12)`, turning a table of observations into a remote intervention surface whose consequences extended well…
IETF
Michael Tüxen and the Zero SCTP Checksum That Still Needed Error Detection
Zero usually looks like absence. In RFC 9653, a zero in SCTP's checksum field means something narrower: one endpoint may omit the correct CRC32c only after its peer has named an acceptable alternative error-detection method for that association. Michael Tüxen's work on the…
CASE FILE
The EU’s Cyber-Product Reporting Clock Is Running Before Its Main Security Rules
Europe has switched on one of the Cyber Resilience Act’s most consequential mechanisms fifteen months before the law’s main product-security duties take effect. From 11 September 2026, manufacturers must report actively exploited vulnerabilities and severe security incidents on…
IETF
A Workload Credential Can Outlive the Attestation Decision Behind It
At 09:00 a workload proves that it is running in Germany and receives an eight-hour credential. At 09:05 the orchestrator moves it to France. The credential still verifies, the key is still under the workload’s control, and the unchanged service still accepts it. Yet one fact…
CASE FILE
The object survived five spellings. Which bytes were signed? RFC 9804
RFC 9804 gives SPKI S-expressions a precise route between readable notation, channel-safe transport, canonical octets and local memory. The route is reversible only when each transition is evidenced. A familiar-looking expression, a display hint or a successful parse cannot by…
Story
A Direct Route Fixed a 150ms Detour. It Has No Backup.
A route from Britain toward Denmark appeared to turn the Atlantic into a roundabout. The first explanation blamed the wrong control point. Operators then found a short European path, traced the detour to export and peering choices, and installed a direct route whose lack of…
IETF
Mark Handley and the SDP Version You Cannot Compare Across Origins
A controller receives two session descriptions. One places version 391 in its `o=` line, the other 402. A dashboard sorts the larger number to the top and calls it latest. The arithmetic is flawless and the conclusion can still be wrong: the two descriptions carry different…
IETF
A Key Transparency Proof Cannot Audit Who Was Allowed to Look
Alice searches a Key Transparency log for Bob and receives a valid proof. Fred makes the same request and is stopped by the application before the log sees it. The proof can show that Alice’s answer fits an authenticated, globally consistent tree. It cannot show why Alice was…
Story
AFRINIC Crossed an ASN Block Boundary With 52 Earlier Numbers Absent From the Ledger
AFRINIC Crossed an ASN Block Boundary With 52 Earlier Numbers Absent From the Ledger intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences…
CASE FILE
The EU Named Three Very Large Services. Their Exact DSA Compliance Dates Are Not Public
The European Commission has put ChatGPT, Reddit and Roblox inside the Digital Services Act’s highest-supervision tier. It also says their additional duties apply by January 2027. What the public record does not yet provide is the day that matters in law: four months after each…
IETF
The Stream Was Ordered. The Network Was Not Yet Proven
At the instant a controller receives `<rpc-reply><ok/></rpc-reply>`, the change can feel complete. The bytes arrived in order, the peer was authenticated, and the server returned success. Yet each of those facts belongs to a different evidentiary layer from the question operators…
Session Map
Governance Branch
RIR Watchdog
Five regional sessions tracking allocation policy, board legitimacy, and institutional continuity.
Open RIR WatchdogCase File
Long-cycle governance dossiers with legal, election, and institutional stress analysis.
Open Case FileNumber Resource Society
Membership, charter, and resource-governance intelligence from the NRS ecosystem.
Open NRS SessionICANN
DNS coordination, accountability frameworks, and global multi-stakeholder process dynamics.
Open ICANN SessionIETF
Protocol standardization trajectory and interoperability risk under fragmented policy conditions.
Open IETF SessionHistory of Internet
Long-cycle infrastructure history used for governance interpretation and structural forecasting.
Open History SessionNOGs
Operator-level implementation intelligence from APRICOT plus regional and national NOG ecosystems.
Open NOGs Session