Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.
CASE FILE
The signed chain skipped a delegation that still existed
NSEC3 Opt-Out allows a large parent zone to leave eligible insecure delegations out of its signed hash chain. That omission can be fully valid. It is also why the chain cannot serve as a complete delegation register: the proof authenticates a limited statement about a hash…
Europe and Middle East Datacenter Trends
A data-centre connection has no date at Gate 1
A site can have land, drawings and an impressive megawatt number while still lacking the one fact that makes its power plan schedulable: a confirmed grid-connection date.
History
The Layer That Had to Come Last: How NNTP Compression Turned Order into Security
Two clients want the same three things: an encrypted channel, an authenticated account and fewer bytes on the wire. One asks for compression first. The server replies `206`, and two doors close: this connection can no longer begin TLS or accept `AUTHINFO`. The other client…
Story
A Private Registry Still Needs Public Limits
LACNIC is private infrastructure governance with public consequences: legitimacy depends on a bounded mandate, published rules, evidence, review and an operational record that affected networks can understand.
IETF
The Reset Had to Prove Itself: TCP's Challenge ACK Defense
A forged reset once needed only to land somewhere inside a moving receive window. RFC 5961 made destructive TCP control flags prove that they reflect the peer’s current state before one guessed sequence number can erase a long-lived connection.
Europe and Middle East Regional ISP Trends
Local broadband support has two clocks when Openreach owns the repair
A customer experiences one continuous outage. The organisations restoring it may be working to two different clocks, and the gap between them is where a promise of “local support” is either proved or exposed.
History
The Reservation That Might Reserve Nothing
Before sending a file, an FTP client could announce how much storage it expected to need. The server might answer `202`, a positive completion, while setting aside no space at all: advance allocation was superfluous on that system. The exchange let unlike machines keep working…
Number Resource Society
An Unanswered Profile Needs a Reply-State Ledger
A public label saying that no answer has been recorded looks like a snapshot. In fact, it starts a clock: every bounce, partial reply, late response and correction can change what the label means.
Story
AFRINIC Reconstituted GovCom. Three Members Were Elected, Two Appointed
AFRINIC says its Governance Committee is constituted and ready to work. The five voting seats arrived by two routes: three through a membership election and two through Board appointment. That mixed design is explicit. The next accountability test is whether requests, conflicts…
History
The Label Routers Could Read Without Knowing the Flow: IPv6 Flow Labels
Two encrypted flows can cross the same IPv6 tunnel with the same outer source and destination addresses. To a router that will not—or cannot—inspect transport headers, they may look identical. The Flow Label offers a deliberately narrow alternative: twenty visible bits in a fixed…
NANOG
The Legal Container Behind an Operators' Community
NANOG’s move from Merit stewardship to an independent corporation made contracts, archives and money easier to assign. It did not make one association the owner of North American networks or their collective political voice.
History
The Blank Field That Had to Be Earned: How NNTP Overview Made Absence Trustworthy
A newsreader receives a tab-separated summary of hundreds of articles. In one row, two tabs touch. Does that blank mean the article lacked a header, or only that the server never indexed it? NNTP could make bulk browsing fast only by answering that question. Its overview format…
IETF
QNAME Minimisation Makes Each DNS Delegation See Only What It Needs
A root server does not need an entire host name to point a resolver toward the next delegation. QNAME minimisation turns that observation into a disclosure rule: reveal the name one boundary at a time, measure fallback, and never confuse less upstream exposure with privacy from…
Europe and Middle East Regional ISP Trends
A digital landline is resilient only for as long as its backup path
The power fails at eight in the evening. The Digital Voice account is active, the number has migrated and a battery unit sits beside the router. An hour later the battery is empty. Or the router remains lit while the fibre modem does not. Or the cordless base and the telecare…
CASE FILE
The Revision Was Newer. It Was Not a Descendant.
A resolver needs a capability introduced on one branch of a YANG module. It accepts a revision dated later than the recommended minimum, yet that revision belongs to the sibling branch and never inherited the capability. The calendar comparison worked. The ancestry test never…
ICANN
UA Day Built 17 Demonstrations. Production Readiness Needs a Return Visit
On one page of ICANN’s UA Day 2026 report, seventeen rows turn an institutional slogan into working entities. There is an internationalized domain from Kenya and a sample Arabic-script mailbox; another row carries Tifinagh, another Thai, another Telugu. These are not signatures…
IETF
The ACK Did Not Arrive: TCP's Retransmission Timer Discipline
A missing ACK does not tell a TCP sender whether data was lost, merely delayed, or acknowledged by a packet still in flight. RFC 6298 turns that ambiguous silence into a controlled decision: estimate, wait, retransmit once, then become progressively more cautious.
Story
A Court Order Is Not a Registry Runbook
A court can determine rights and impose duties. It does not thereby describe every safe registry, credential and routing step. LACNIC needs a disciplined bridge from legal command to operational execution.
Story
LACNIC’s 11 IXP Collectors Need a Vantage-Point Receipt
LACNIC has opened a useful window onto local routing: eleven BGP collector views, public MRT files and charts of prefixes, origin networks and paths. The problem begins only when a window is mistaken for the landscape. The portal does not bind each result to the peer cohort…
ICANN
ICANN Qualified 56 Applicants for Support. What Has the Program Actually Lowered?
ICANN approved support for 56 prospective new-gTLD applicants. The result lowers defined entry costs, but it is not yet evidence of 56 applications, contracts or delegations.