Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.
IETF
IETF's Stand-In Draft Names the Successor, Not the Trigger
Picture a transfer panel with two circuits. One is marked for the IETF Chair; the other is wired to a named stand-in. The second circuit is ready, but the sensor between them is missing. The panel says power will switch “automatically and immediately” when the first circuit…
Story
AFRINIC Invited Members to Test MyAFRINIC v2. The Beta Needs a Defect-to-Release Ledger
AFRINIC used its AfPIF 2026 page to invite members into the next stage of MyAFRINIC v2: workflow interviews, user acceptance testing and a live beta. That is a sensible way to test a member portal against real registry work. It also creates an evidence duty. Every finding should…
CASE FILE
The Record Expired. The Resolver Kept It Alive
DNS Serve Stale can preserve service when authorities cannot answer. It can also keep a retired address or denial alive after the publisher's ordinary freshness claim has ended. The difference lies in who owns the exception and whether its evidence survives.
History
The Message That Tried to Arrive Before the Mailbox: How SMTP Abandoned Terminal Delivery
Early SMTP could ask for more than mail. One command demanded that the text appear on a user's live terminal, another treated the terminal and mailbox as alternatives, and a third attempted both. Those verbs made a fleeting human state—logged in and willing to be interrupted—part…
Story
ARIN Calls Its Space Policy Joint. IETF Has Not Adopted the Address Model
ARIN-2026-1 says the proposal is joint with an IETF working group. The linked IETF record says the address model has no formal standing, and the working-group chairs found no clear consensus to adopt it as-is. Both statements can be faithfully recorded only if institutional…
CASE FILE
The SID Chose a Member Link. It Did Not Own the Bundle.
One peering interface was really three physical links. The ordinary Peer Adjacency SID sent traffic to the logical bundle and let its own balancing choose a member. The new member SID could instead place one flow on the lane that looked emptiest. That sharper instruction did not…
History
The Green Light That Was Not Yours: How NNTP Separated Group Policy from Posting Permission
A news server marks one group `y`, the old shorthand for posting permitted, and still refuses the person at the keyboard. Another group carries `n`, yet a specially privileged client may pass. NNTP did not contradict itself. It made the catalogue describe the group's ordinary…
IETF
IETF's Chair-Delegation Draft Reaches the IAB Seat
A notice on a public page can say who will chair a meeting, for how long, and on whose authority. That may be enough to move work without moving office. It is less obviously enough when the same notice says another Area Director now holds the IETF Chair's full membership on the…
History
The Correct Password That Still Needed an Account
The password had done its job. The FTP server did not reject it, yet it did not say the user was logged in. It returned `332` and waited for `ACCT`—a third piece of access-control information whose authority belonged neither to the user name nor to the secret that followed it.
History
The Address Seen from Outside: What STUN Could Discover but Not Guarantee
When a client behind a Network Address Translator (NAT) seeks to understand its reachable address from the perspective of an external server, it performs a specific exchange: sending a STUN Binding request. This request, originating from a known local address and port, traverses…
CASE FILE
The Certificate Named an Interface. It Did Not Prove the Device.
The commissioning test produced two honest identifiers. The certificate named the factory address of one Wi-Fi interface. The frame arriving at the access point used a private address chosen for that network. Rejecting the connection would punish a real device for using a privacy…
IETF
DNS Serve-Stale Lets the Recursive Resolver Decide When Expired Data Is Better Than Failure
A DNS record reaches the end of its TTL just as every authoritative server becomes unreachable. The old address may still preserve a working service—or it may lead users back to infrastructure the zone owner meant to retire. Serve-stale keeps resolution alive by giving the…
CASE FILE
Two Answers Said NOERROR. Only One Carried the New Zone
RFC 9660 can bind a DNS answer to the zone version that produced it. That makes a mismatch visible without pretending that one version token proves the zone is correct, the fleet has converged or users saw the same path.
Story
Where Member Notice Stops: RIPE-865 and the Burden of a Public Record
RIPE-865 preserves the general position that RIPE NCC members are informed when authorities seek their data or registry action, unless notice is expressly prohibited. Its eEvidence section creates a different notification state: confidentiality applies, and the RIPE NCC cannot…
Story
LACNIC and the economics of IANA recognition and franchise risk
IANA recognition is not a commercial franchise, yet it creates a similarly scarce institutional position: one regional registry becomes the globally accepted gateway between an upstream numbering system and a defined community.
Story
APNIC’s Service-Term Delegation Has No Public Classification Receipt
APNIC’s Executive Council gave the Secretariat room to change service terms without turning routine administration into policy making. The delegation is sensible and expressly bounded. What the public record lacks is the small entity that would let a later reader test the…
Europe and Middle East Regional ISP Trends
A mapped pole is not a broadband route until access is cleared
A fibre planner can draw a convincing line through a village in minutes. The line follows existing poles, avoids an expensive trench and turns a difficult build into a short spreadsheet. Then a field team reaches the first pole and asks the question the map did not answer: can…
IETF
Brian Carpenter and the Boundary That Needed Proof
A network diagram can draw a clean perimeter around a campus, cloud overlay or industrial system. A packet cannot rely on the ink. Brian Carpenter and Bing Liu's RFC 8799 asks what must replace that intuition when a protocol has meaning only inside: verifiable membership…
History
The Number Two Peers Never Negotiated
The client placed 1,460 in its SYN. The server returned 1,200 in the SYN-ACK. Neither side yielded, because the numbers were not competing offers. Each endpoint was describing the largest TCP data segment it could receive. What either side would actually send remained a separate…
CASE FILE
The Timestamp Got Sharper. The Clock Did Not Gain Authority.
Send one NTP request through ordinary UDP port 123 and its arrival may be timestamped after software and queueing have already left fingerprints on the measurement. Wrap the same logical request in a PTP event message, and a compatible network card can timestamp it at the wire.…