Policy continuity, legitimacy, and accountability signals across internet governance institutions.
Governance
Governance
Internet governance intelligence tracks institutions, policy processes, standards activity, registry operations, accountability disputes, and implementation signals that affect internet infrastructure. BTW.
RIR WatchdogCase FileNumber Resource SocietyICANNIETFHistory of InternetNOGs
RIR Watchdog, Case File, NRS, ICANN, IETF, History of Internet, and NOG sessions.
Coverage prioritizes implementation evidence and institutional behavior over declarative positions.
Latest Coverage
Latest from Governance
7,712 articles
Story
ARIN's Smaller Slate Keeps the Withdrawals in View
The September candidate list offers a useful governance test: account for the people who leave the field without inventing the reason they left.
IETF
OpenPGP’s New Algorithm Numbers Rewrite the Test Vectors
Eight numbers are moving through OpenPGP’s standards machinery. In the published draft they are experimental values 100 through 107; in an open editing branch they are 37 through 44; in the public IANA registry those lower slots remain unassigned. The discrepancy is not cosmetic.…
IETF
The old address plan survived the IPv6 launch
6rd let an operator introduce IPv6 without first replacing its IPv4 access network. The shortcut also gave an older address plan a continuing say over the size, lifetime and eventual migration of the new service.
IETF
A Capability Menu Is Not a Subscription Decision
An orchestrator sees a tidy answer before it opens a notification stream: this device supports HTTPS, XML or JSON, and two TLS versions. The discovery is valuable precisely because it is compact. It becomes dangerous only when a control system silently turns “listed” into…
ICANN
Fifth Allocatable Variant Triggers Full Evaluation Fee
For new applicants, ICANN’s 2026 fee structure includes up to four variant strings, then charges the full evaluation fee for each additional allocatable variant.
History
The Password Was Correct Once. Acceptance Changed What Correct Meant: RFC 1938
Passwords usually sound like facts: either the claimant knows the right string or does not. RFC 1938 made that description incomplete. In its one-time-password system, a correct answer was consumed by success. The server replaced the value against which the next answer would be…
Story
ARIN’s RPKI Failover Test Left the Dependency Question Open
ARIN blocked access to its RPKI repositories for an hour, restored it, confirmed redundancy five minutes later and reported a return to baseline after another fifteen. That is unusually concrete resilience evidence. It is also narrower than the dependency question ARIN had…
IETF
The second login changes the security bargain
Keeping an IMAP connection open can save repeated setup work. It also removes a convenient security boundary: the assumption that one connection belongs to one user. The price of reuse is a complete account of what must be reset, what deliberately survives and who checks the next…
Story
RIPE Database 1.124.1 Fixed Certificate Selection. Its “No Evidence” Finding Needs a Search Boundary
RIPE NCC was right to ship a reported authentication vulnerability without waiting for a routine test interval. The next duty is different: show members what time, traffic and registry history were actually examined before “no evidence of exploitation” became the public…
IETF
Adam Roach and the Terminated Subscription That Did Not End the Resource
A control-room tile turns red: `Subscription-State: terminated`. Someone closes the incident because the monitored resource is presumed gone. Adam Roach’s SIP event specification permits no such shortcut. The subscription is certainly over; the resource may still exist, remain…
IETF
ELA’s Voucher Arrives After the Device Identifies Itself
In a zero-touch join, the smallest interval can carry the largest governance consequence. A new device using the proposed ELA protocol authenticates a domain gateway, sends its credential identifier and waits while that gateway asks an enrollment server for authorization. Only in…
IETF
Who pays to keep a search alive?
A mailbox search can finish correctly while its request for continuing updates is refused. IMAP makes that distinction explicit. The harder question is whether the product, its resource budget and its promises to users do the same.
History
The Server Pool Was Redundant. The Address Authority Was Singular: RFC 1931
A workstation with no configured address asks a question that looks deceptively small: which IP address may I use? RFC 1931 answered with several servers, but not several truths. Dynamic RARP separated the machines that could hear and answer a request from the authority allowed…
IETF
An Enrollment Voucher Arrives After Identity Leaves the Device
A constrained device can withhold its operational identity and still disclose enough to be enrolled. In Lightweight Authorization using EDHOC, that disclosure is deliberate: an authenticated domain authenticator receives the device’s enrollment identity and sends it to a trusted…
IETF
The deadline arrived before permission to send
A scheduled email can ask a server to keep it still while a second instruction demands that it arrive sooner. SMTP's answer is not a faster queue. It is a refusal to accept incompatible obligations—and a careful division of responsibility for the promises that remain.
IETF
Scott Hollenbeck and the Transfer Lock That Could Not Explain Itself
A domain-security dashboard finds `clientTransferProhibited` and turns its badge green. The code deserves some of that confidence: in the EPP domain mapping authored by Scott Hollenbeck, a transfer request must be rejected while the status is present. But the badge has answered…
Story
APNIC’s WHOIS Archive Reports Two Totals for the Same Hour
The latest completed hour says APNIC received 3,192,583 WHOIS queries. Add the seven query types printed beside that total and the answer is 3,183,463. The missing bridge is not a rounding error; it is the meaning of the measurement.
IETF
IPv4 retirement needs a boundary, not just a percentage
A new individual Internet-Draft separates protocol removal from measured security gains. Its operational question is who owns the IPv4 processing left outside the claim.
IETF
A Cryptographic Malfeasance Report Cannot Revoke Trust
Three time servers sign answers that cannot all be true in the order they were received. Roughtime lets a client preserve that contradiction as portable cryptographic evidence. Yet the proof does not name the guilty server, appoint the reviewer, alter a trusted-server list or…
IETF
One EDHOC Key ID Can Point to Several PSKs
A constrained device sends a compact key identifier inside an EDHOC exchange. The responder looks it up, tries a pre-shared key and authenticates the message. Revision 09 of the IETF LAKE working group’s EDHOC-PSK draft changes what may sit behind that lookup: one identifier can…
Session Map
Governance Branch
RIR Watchdog
Five regional sessions tracking allocation policy, board legitimacy, and institutional continuity.
Open RIR WatchdogCase File
Long-cycle governance dossiers with legal, election, and institutional stress analysis.
Open Case FileNumber Resource Society
Membership, charter, and resource-governance intelligence from the NRS ecosystem.
Open NRS SessionICANN
DNS coordination, accountability frameworks, and global multi-stakeholder process dynamics.
Open ICANN SessionIETF
Protocol standardization trajectory and interoperability risk under fragmented policy conditions.
Open IETF SessionHistory of Internet
Long-cycle infrastructure history used for governance interpretation and structural forecasting.
Open History SessionNOGs
Operator-level implementation intelligence from APRICOT plus regional and national NOG ecosystems.
Open NOGs Session