Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.
Story
LACNIC’s 11 IXP Collectors Need a Vantage-Point Receipt
LACNIC has opened a useful window onto local routing: eleven BGP collector views, public MRT files and charts of prefixes, origin networks and paths. The problem begins only when a window is mistaken for the landscape. The portal does not bind each result to the peer cohort…
ICANN
ICANN Qualified 56 Applicants for Support. What Has the Program Actually Lowered?
ICANN approved support for 56 prospective new-gTLD applicants. The result lowers defined entry costs, but it is not yet evidence of 56 applications, contracts or delegations.
Global Cloud Services Trends
A Code-Signing Certificate Has Two End Dates
A replacement certificate changes tomorrow's build, but a valid timestamp can preserve yesterday's binary beyond the signer's expiry. The real cutover is therefore an inventory of artifacts, timestamp tokens, revocation time and verifier results—not a closed renewal ticket.
History
The Timestamp Saved Before the Search: How NEWNEWS Chose Duplicates Over Missing Articles
A news reader asks a server what arrived since its last visit. The obvious bookkeeping move is to save the time when the answer comes back. It is also the dangerous one. An article can arrive while the server is searching: too late for the current result, yet earlier than the…
History
The Relay That Added Context by Cutting Off the Message
A nearly full syslog packet arrived without a recognizable timestamp. To make the record usable, the relay had to prepend its own local time and, if it could, the name by which it knew the sending device. The envelope did not grow with the explanation. At 1,024 bytes, the new…
CASE FILE
The Version Number Promised Compatibility. It Had Not Tested the Device.
A controller sees a YANG module version above its recommended minimum and admits a change. The target then lacks the node the workflow expected—not because the version comparison lied, but because it answered a question about artifact lineage rather than the exact schema and…
CASE FILE
The files matched. The authority did not
An RPKI Signed Checklist can bind exact file bytes to a declared set of Internet Number Resources. That is a useful and unusually precise proof. It is also much narrower than the green result can appear: the entity does not identify a company, certify a document's truth, prove a…
IETF
Clarence Filsfils and the Segment List That Learned to Share an Address
An SRv6 path can be perfectly explicit and still carry waste: the same locator block repeated across instruction after instruction, plus zero padding that moves through the network without adding a decision. RFC 9800 removes that repetition. Its deeper achievement is to specify…
History
The Secure Channel That Had to Forget the Conversation: How NNTP STARTTLS Reset the Session
A news client has already inspected a server's capabilities, selected a newsgroup and positioned an article. Then it asks for TLS. The TCP connection stays open, but the protocol refuses to carry those earlier conclusions into the protected phase. The group selection disappears…
Story
ARIN’s 28 “Legitimate” Fraud Reports Were Not 28 Findings of Fraud
ARIN’s annual shorthand divided 223 policy-noncompliance reports into 195 outside its fraud process and 28 deemed legitimate. The arithmetic is exact. The meaning is not. ARIN’s own quarterly record shows that the 28 include corrected records, withdrawn routes, unconfirmed…
CASE FILE
The Counter Named the Discard. It Had Not Proven the Cause.
Two interfaces report the same standardized discard class during one service degradation. At the first, a deliberate access rule is doing precisely what its owner intended. At the second, an old rule is catching valid traffic after a routing change. The labels agree; the…
History
The Stream That Started Over Without Closing the Association
A counter could return to zero while its old data remained in the network. SCTP stream reconfiguration made that contradiction a controlled transition: the stream could acquire a new sequence epoch only after a named TSN boundary had accounted for the old one. The association and…
IETF
The IETF's Online Onboarding Removes the Clock, Not the Language Boundary
The most consequential line in the IETF's new training brief is not about video length or hosting. It says the course must be fully self-paced and on demand, with no live facilitation, scheduled cohort or synchronous session. A newcomer will no longer need to be in the right room…
History
The Link That Stayed Up After Rejecting a Protocol
The refusal arrived over a link that had already succeeded. Its two endpoints could frame PPP packets and keep LCP open; they simply did not share support for everything one endpoint tried to place inside. Protocol-Reject turned that mismatch into a bounded instruction: name the…
CASE FILE
The Extension Was in IANA’s Registry. The Server Still Had Not Promised to Accept It.
A registrar’s integration system finds an `Active` EPP extension in IANA’s public registry and enables the command path. The next registry server’s greeting does not advertise the extension namespace. The specification is real and the catalogue is correct; the automation has…
History
The Article the Server Declined Before It Saw the Body: How IHAVE Separated an Offer from Acceptance
One news server offers three identifiers to a peer. The peer answers that it already has the first, cannot decide about the second just now, and wants the third. Only then does the third article cross the wire. Even that transfer does not settle the matter: after inspecting the…
Story
APNIC Can Filter the Next WHOIS Download. It Cannot Recall the Old Ones
APNIC can remove contact fields from the next bulk-WHOIS dataset it generates. That is a real and testable privacy control. It cannot make the same edit reach backward into files that bulk-access users may already have downloaded under earlier terms. `prop-162` places both…
CASE FILE
Two validators agreed on the version. They did not agree on the routes
Two RPKI validators can report the same RRDP session and newest serial while retaining different repository histories. The disagreement becomes visible only if they remember what hash an already-seen delta carried before. RFC 9697 turns that memory into an operational control…
History
The Address That Grew Old Before It Died
A control room can stop assigning new work to a console without pulling power from the job already running there. IPv6 gave an autoconfigured address the same kind of staged retirement. One clock ended its claim on future communication; another ended the address itself. The gap…
CASE FILE
The Packet Carried the Action. One Router Could Not Read Far Enough to Perform It.
A correctly formed MPLS packet enters a path with a hop-by-hop action in a post-stack header. The first router finds and performs it. A middle router sees the in-stack indication but cannot read the entire post-stack container, so it skips that processing and forwards the packet.…