Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.
CASE FILE
The Group Reached an Epoch. It Did Not Reach a Decision: RFC 9420’s MLS Boundary
A secure group can arrive at a new cryptographic state with impressive precision: a Commit has been processed, keys have advanced, the group context has changed and a new epoch exists. None of that, by itself, tells an organisation that its people have agreed, understood…
CASE FILE
ITU Gives NOC Two Meanings. One Underline Carries the Proposal
In the official PP-26 action legend, `NOC` can mean that no change proposal exists. Underline the same three letters and it becomes a proposal: a Member State is asking that specified text be maintained without change and should explain why. The distinction is defensible, and the…
CASE FILE
The Schedule Was Enabled. It Had Not Executed the Change: RFC 9922
An `enabled` schedule with a credible next window and a recent `last-occurrence` can be useful management evidence. It is not proof that a controlled change was authorized, invoked, completed, rolled back safely, or produced the effect a dashboard now reports.
History
The DNS Walk Counted Records, Not Reachability: RFC 1296's Lower Bound
The Internet acquired a number before it acquired a census. In January 1992, RFC 1296 reported 727,000 hosts from a DNS collection run. The point of Mark Lottor's memo is not that the number settled what the Internet was. Its more durable lesson is that a careful collector can…
History
A Hop Approved the Identifier. The Target Had Not Accepted the Stream: RFC 1190
An ST-II router could answer a `CONNECT`, approve the proposed forwarding shorthand and reserve resources before the request reached its target application. That was useful progress, but it was not consent. RFC 1190 built a separate return journey for `ACCEPT`, and a multi-target…
IETF
David Schinazi and the UDP Tunnel That Opened Before the Destination Answered
A green CONNECT-UDP response can arrive before the destination has sent a single packet. RFC 9298 makes that apparent paradox precise: the proxy is reporting its own readiness, not certifying a remote application's existence.
NPNOG
Who Opens the Room? npNOG, NPIX and SANOG in the npNOG-10 Ceremony
The first ten minutes of a conference can look like an org chart. At npNOG-10 in Pokhara, the [published programme](https://npnog.org.np/npnog10/programs/conference/) gave the first welcome to Rupesh Shrestha, identified there as NPIX managing director and SANOG chair. The next…
CASE FILE
W3C Math Gives Consensus Calls One Week. Silence Is Not Support
The W3C Math Working Group has a sensible rule for decisions made in meetings: every resolution remains provisional until a call for consensus gives absent entities a week to respond. The difficult part begins when the week ends. Its charter says no objections can turn the…
History
The Public Directory Needed a Right to Refuse: RFC 1295's Boundary
An electronic directory can make a name easier to find long before it makes that name legitimate to publish. RFC 1295, the North American Directory Forum's 1992 *User Bill of Rights for entries and listings in the Public Directory*, put that distinction in an unusually plain…
History
The Hostname Was Valid. It Was Still a Bad Name: RFC 1178
In October 1989, RFC 1123 told host software to accept a hostname beginning with a digit. Ten months later, RFC 1178 told administrators not to choose one. The two instructions were not contradictory. One defined what compliant software had to parse; the other described what…
History
A Frame Label Was Not a Virtual-Circuit Configuration: RFC 1294’s Multiprotocol Boundary
A Frame Relay receiver could be given enough bytes to identify the protocol inside a frame and still have no authority to treat the virtual circuit as available for every encapsulation it could recognise. RFC 1294 made that separation unusually explicit. NLPID and SNAP told a…
IETF
RFC 9925 Made an X.509 Certificate Unsigned. Its Trust Must Arrive Elsewhere
RFC 9925 defines a certificate-shaped entity whose signature value is deliberately empty. Its issuer field may even repeat the subject for compatibility, yet the document says the value is only a placeholder: the entity has no issuer and is neither self-signed nor self-issued.…
IETF
Christopher A. Wood and the Privacy Boundary No One Operator Should Hold
Oblivious HTTP does not ask an operator to forget what it can see. It rearranges the transaction so that one operator can see where a request came from and another can see what the request says—then makes the absence of a single complete view the privacy control.
History
The Requirement Was Firm. The Host Was Still Not Configured: RFC 1127
A capitalized MUST can settle an argument about software. It cannot reach into a machine room and choose a live value. In 1989, the Host Requirements effort made Internet interoperability more explicit by separating firm duties, reasoned recommendations and genuine options. RFC…
History
A Known DLCI Was Not Yet a Usable Neighbour: RFC 1293’s InARP Boundary
A network could announce a new Frame Relay circuit and give a station its DLCI, yet leave that station unable to address the peer at the far side. RFC 1293’s Inverse Address Resolution Protocol did not erase that gap by treating a virtual circuit as an endpoint identity. It made…
APRICOT
APRICOT Calls Fellowship Selection Merit-Only, but Its Decisions Are Final
APRICOT publishes its fellowship criteria and names the committee that decides. But the same public record acknowledges subjective evaluation and makes decisions final and non-negotiable, leaving its merit-only claim difficult to audit when a material fact may be wrong.
CASE FILE
The UDP Payload Was Protected. The Option Was Not: RFC 9868
RFC 9868 gives UDP a place for transport options. It does not place that option area inside the UDP user data that DTLS protects, turn an option checksum into a security decision, or prove that an endpoint, path or application acted on an option.
CASE FILE
Internet Society Scheduled Nine Board Meetings Without an Open Forum
From 14 May 2025 through 25–26 July 2026, nine consecutive Internet Society Board agenda pages offered the public a place to listen but scheduled no Open Forum where attendees could question or address trustees. That is a real form of transparency. It is not participation. And…
History
A Catalog Was Not an Interoperability Verdict: RFC 1292’s X.500 Snapshot
An implementation catalog can lower the cost of asking a sensible question without answering the harder questions that follow it. RFC 1292 gathered descriptions of X.500 software in January 1992 and arranged them by availability, component type, transport, pilot connectivity…
History
The Line Was Complete. The Command Had Not Run: RFC 1116 and Telnet Linemode
In character-at-a-time Telnet, a typist could wait for the network to see each key return. Linemode made the nearby terminal feel immediate: editing and echo could happen before the line crossed the path. That improvement also created a durable evidentiary trap. The completed…