Skip to main content

Governance

Governance

Internet governance intelligence tracks institutions, policy processes, standards activity, registry operations, accountability disputes, and implementation signals that affect internet infrastructure. BTW.

RIR WatchdogCase FileNumber Resource SocietyICANNIETFHistory of InternetNOGs
Governance signal visual
GovernanceGovernance
FocusInstitutional Governance

Policy continuity, legitimacy, and accountability signals across internet governance institutions.

CurrentSeven Governance Tracks

RIR Watchdog, Case File, NRS, ICANN, IETF, History of Internet, and NOG sessions.

SignalExecution over Statement

Coverage prioritizes implementation evidence and institutional behavior over declarative positions.

Latest Coverage

Latest from Governance

7,781 articles

AI editorial portrait of Ole Trøan beside three coordinated IPv6 decision paths for source address, first hop and DNS context.

IETF

Ole Trøan and the Three Decisions NAT Used to Hide

A laptop has two globally usable IPv6 addresses, two routers and two DNS resolvers. Nothing is missing, yet the first packet can still fail: the chosen source may belong to one provider, the chosen door to another, and the chosen name answer to a third context. Ole Trøan’s…

Sep 7, 2026
一道光线把抽象的 CSR 密钥、磨砂遮蔽的私密核验舱和一张半透明公开证书卡连接起来

IETF

CSR Attestation Reaches Last Call, but the Certificate Is Not the Evidence Record

A certificate can be perfectly valid and still say nothing about the private evidence that persuaded its issuer. The CSR-attestation draft now in IETF Last Call makes that boundary unusually clear: a CA may appraise extra device evidence or discard it, while publishing the…

Sep 7, 2026
Two separate MPLS network cores pass selected flows through paired boundary gateways while rejecting malformed traffic.

IETF

An Authorized MPLS Neighbor Is Still Outside the Trust Boundary

An inter-provider link can be legitimate, authenticated and operationally necessary without making either provider part of the other's trusted core. RFC 5920 makes that distinction explicit. The leadership problem is not whether to trust or distrust the peer in the abstract; it…

Sep 7, 2026
A sealed review dossier sits behind a transparent gate with two counted amber tokens and a third waiting beside concentric clocks.

Story

The New RIR Draft Has Two Review Limits—and No Public Counter

Three requests can cite the same duty, concern the same registry and arrive in the same audit cycle. Under the recommended RIR Governance Document, whether the third may proceed depends on two clocks and on who counts as the same initiator. The draft supplies the limits. It does…

Sep 7, 2026
An amber archived transparency tree remains connected to a remote client while several paths move toward a live cyan tree and a sealed retirement control.

CASE FILE

A Key Transparency Tombstone Does Not Retire the Old Log

The migration model in the KEYTRANS architecture gives an old log a precise job: point each label toward its newer home without letting an outage revive stale data. That marker solves lookup order. It does not prove that offline clients have finished monitoring the old history…

Sep 7, 2026
A sealed cyan audit tree preserves logged AI routing events while an unlogged pulse is exposed only when independent provider and intake streams fail to balance.

CASE FILE

RMRP Can Sign Its AI Audit Log. It Still Cannot Count the Calls It Never Saw

A new model-routing draft turns silent omission into a signed assertion that can be challenged. That is a serious control improvement—but completeness still begins with a witness outside the router.

Sep 7, 2026
Two independent decision spaces share a service conduit while retaining separate review paths.

CASE FILE

Two Institutions Share the Systems. Their Review Routes Remain Different

IRTF conduct rules and the IESG's access-restriction statement expose a governance problem hidden inside shared infrastructure: the reach of a technical intervention can exceed the forum that prompted it. The decision, its implementation and its review must remain separately…

Sep 7, 2026
Ordinary packets stay on a fast path while one marked packet enters a protected inspection chamber and a flood is blocked.

History

The Packet That Asked Every Router to Stop and Look: IPv4 Router Alert

A packet can cross a router without being addressed to it. IPv4 Router Alert gave that passing packet a way to ask for exceptional attention—and thereby turned attention itself into a resource that networks had to defend.

Sep 7, 2026
One database reference passes through two independent authorization locks between structured registry records.

Story

RIPE Database mnt-ref Authorises an Organisation Reference, Not Corporate Control

An accepted `org:` link in the RIPE Database has passed a meaningful authorisation test. That makes it evidence of an approved database reference—not a shortcut to proving ownership, group membership or control of the network behind the record.

Sep 7, 2026
An open accountability ledger and a suspended handover baton before a network map of Africa.

Story

AFRINIC’s CEO handover needs a public transition ledger

AFRINIC announced Mike Silber as CEO Designate on 24 August 2026. Because he is due to assume office on 1 January 2027, the interval should be documented as a governed transition rather than treated as an already completed change of leadership.

Sep 7, 2026
Two distinct in-band management and signaling channels share an MPLS-TP transport path before separate identity and authorization checks.

IETF

An In-Band Management Channel Reuses the Transport Path Without Inheriting Its Authority

An MPLS-TP node without native IP delivery or a separate out-of-fiber network can still be managed across the transport fabric. RFC 5718 makes that possible through the Generic Associated Channel, but the channel supplies only a delivery path: it neither identifies the sender nor…

Sep 7, 2026
AI editorial portrait of Tim Chown in a network operations setting with an abstract sparse IPv6 address map.

IETF

Tim Chown and the Host List Hidden Inside an IPv6 Address Plan

IPv6 made blind enumeration uneconomic, but it did not abolish reconnaissance. Tim Chown’s work shows how addressing conventions and operational exhaust can turn an immense namespace into a succession of small, testable target lists—and why defenders face the same discovery…

Sep 7, 2026
A routing-registry tree, an absent legacy node and a decision dossier meet at a controlled restoration gate.

Story

AFRINIC’s AS-SET restoration exception needs a decision receipt

A narrow continuity exception could preserve a deleted flat-name entity—but without a bounded evidentiary record, it may reopen the legacy namespace risk the proposal leaves in place.

Sep 7, 2026
A four-cell packet label crosses several networks, copies into fragments and fades into an archive.

History

The Four Bytes That Outlived Their Network: IPv4’s Stream Identifier

One IPv4 option was exactly four bytes long and carried a name from a network concept already slipping into history. Stream Identifier shows how a protocol field can stop doing useful work long before standards formally retire it.

Sep 7, 2026
A hand moves a blank address-allocation card between registry trays while a mid-1990s internal network remains active behind glass.

History

The Prefix Looked Unused. The Appeal Could Not Prove It: RFC 1917

The return form in RFC 1917 was strikingly short. Send a message, identify a network prefix and ask that its registry contact become “reserved.” On paper, the address could move from an organisation back toward the common pool in a few lines. Yet the form said nothing about…

Sep 7, 2026
An RDAP lookup moves from a regional registry grid to a national registry node, where a smaller nested address block is highlighted.

Story

APNIC’s NIR RDAP Redirect Finds a More-Specific Record, Not a Network Operator

A redirect from APNIC to an NIR-specific RDAP host is an evidence trail about where registration data is served. It can lead to a narrower record without proving who currently routes, owns or operates the network.

Sep 7, 2026
A cyan multicast tree follows one shared three-part selector while an amber local-policy branch diverges and stops at a safety gate.

CASE FILE

PIM Flex-Algo Can Choose a Better Path. One Router's Local Policy Can Still Break the Tree

A multicast receiver may ask for a low-latency or high-bandwidth path instead of the ordinary shortest path. The difficult part is not encoding that wish; it is proving that every router which must build the tree gives the same three numbers the same meaning.

Sep 7, 2026
Two glass IPv4 transfer paths feed equal brass weights; one exposes checkpoints while the other passes beneath an opaque cover above a map of Latin America and the Caribbean.

Story

LACNIC Made Merger Transfer Fees Equal. It Did Not Make the Payment Rules Equal

A price list can make two transactions look alike long before their obligations are alike. LACNIC has put merger, acquisition and name-change transfers on the same published fee bands as ordinary IPv4 transfers and has attached both to an annual inflation clock. Yet the public…

Sep 7, 2026
Голубой сигнал проходит через восстановленный стеклянный раздел и остаётся разделённым на голубой и янтарный пути к двум многоадресным целям внутри фиксированной рамки адресного пространства

IETF

GAAP-23 fixes its address ranges but leaves convergence after partitions open

The latest Group Address Allocation Protocol draft removes one source of disagreement: independently written implementations now have fixed IPv4 and IPv6 ranges. In the same revision, it records a harder limit. Two sides of a partition can choose different fallback addresses for…

Sep 7, 2026
A 1990s Internet mail workstation sends a glowing packet corridor toward a voice-mail appliance while a return path and listening sequence remain visibly separate

History

The Mailbox Accepted the Voice. It Could Still Forget the Message: RFC 1911

A voice mailbox could accept an Internet message, store its sound and still forget part of what made it an Internet message. RFC 1911 did not hide that cost. Its minimum profile joined telephone-keypad systems to MIME and ESMTP while exposing the distance between accepted bytes…

Sep 7, 2026

Session Map

Governance Branch

RIR Watchdog

Five regional sessions tracking allocation policy, board legitimacy, and institutional continuity.

Open RIR Watchdog

Case File

Long-cycle governance dossiers with legal, election, and institutional stress analysis.

Open Case File

Number Resource Society

Membership, charter, and resource-governance intelligence from the NRS ecosystem.

Open NRS Session

ICANN

DNS coordination, accountability frameworks, and global multi-stakeholder process dynamics.

Open ICANN Session

IETF

Protocol standardization trajectory and interoperability risk under fragmented policy conditions.

Open IETF Session

History of Internet

Long-cycle infrastructure history used for governance interpretation and structural forecasting.

Open History Session

NOGs

Operator-level implementation intelligence from APRICOT plus regional and national NOG ecosystems.

Open NOGs Session