Intelligence

Latest Articles

Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.

An auction token stops at a narrow gap before an illuminated registrar system, separating a domain sale from the service needed to complete it.

North America Cloud Services

The Sheriff Could Not Auction the Registrar's Service: Network Solutions v. Umbro

A portfolio of domain names looked like an asset a sheriff could sell. The Supreme Court of Virginia focused on the missing link: the winning bidder still needed Network Solutions to accept a new registration relationship and keep the names operational.

A sealed credential passes an authentication gate into three response clocks that split toward protected disclosure or a documented denial.

ICANN

When a Registration-Data Request Becomes Urgent—and What the New Clock Still Does Not Authorize

ICANN’s new urgent-request timetable can make a registrar answer faster. It cannot turn urgency into an automatic right to private data. The policy times acknowledgement and decision; authentication, necessity, legal basis and the merits of disclosure remain separate questions.

Two dark endpoint instruments exchange teal and amber handshake signals while compact glass window cells open onto much larger illuminated buffer chambers.

IETF

The Field That Meant More After the Handshake: TCP Window Scale

TCP kept a 16-bit receive-window field even after fast, long-distance paths needed far more than 65,535 bytes in flight. Window Scale did not enlarge that field. It made the handshake establish how each endpoint would interpret the field for the life of one connection.

A security engineer holds a deployment gate closed as an intact chain of build-provenance checkpoints leads from a sealed artifact to a server rack, with one checkpoint glowing amber.

Global Cloud Services

GitHub's Attestation Proves a Build Path, Not a Safe Binary

A valid signature can establish where a binary came from while leaving the deployment decision unresolved. GitHub’s artifact attestation becomes a security control only when the consumer tests the recorded build route against an explicit trust policy.

A connection-opening signal carries early application data and an opaque cookie, with a replay echo and ordinary fallback lane.

IETF

The Request Arrived Before the Handshake: TCP Fast Open's Replay Bargain

TCP Fast Open let a returning client put its first application bytes in the packet that asked to open a connection. The saved round trip was real, but so was the bargain: replay tolerance, cookie rotation, bounded pre-handshake work and reliable fallback became part of operating…

Number Resource Society

A Member Logo Is Not a Live Power of Attorney

The Number Resource Society’s membership page makes an important distinction in its headings: one gallery is for members said to have entrusted NRS with representation in RIR matters, while another presents the wider member community. The distinction should also be carried by the…

AI editorial portrait of Aaron Wendel at an Internet number-policy meeting

Leaders

Aaron Wendel and What Two Failed ARIN Proposals Reveal About Operator Power

Fourteen years apart, two public tallies put Aaron Wendel on the losing side of consequential debates about Internet number resources. The defeats are more revealing than a conventional success story: they show how practical operating knowledge enters policy, how commercial…

Two domain tokens pass through a registrar switchboard and evidence tray, while separate decision paths reach a protected status-change gate.

ICANN

The Takedown Notice Did Not Become a Verdict: Petroliam Nasional v. GoDaddy

The Ninth Circuit did not call every registrar passive or every takedown request futile. It drew a narrower, more useful line: a service provider's ability to maintain and forward a domain name does not create an unwritten ACPA claim that turns notice into adjudicatory authority.

A segmented clock forms a temporary bridge from an open registration ledger to layered policy panels, while a separate community track feeds the permanent structure.

ICANN

The 90-Day Emergency Policy That Kept Domain Registration Data Moving

Eight days before the GDPR became applicable, ICANN used a temporary contractual power to keep one registration-data regime from fragmenting into hundreds of private answers. The power was immediate, but deliberately self-expiring: permanent policy had to come from somewhere…

A luminous credential branches to multiple endpoint gateways, with most verified in blue and two stragglers still amber.

Global Cloud Services Trends

From 200 Days to 47, TLS Renewal Becomes Runtime State

Public TLS certificates are getting shorter. The consequential change is not a busier expiry calendar; it is that authority, issuance, deployment and external verification must now behave like one continuously observed production system.

One continuous row of luminous data crosses a glass connection between two endpoints; a broken cyan path yields to an amber lower path.

IETF

The connection is larger than the path: Multipath TCP keeps one byte stream across several routes

A phone leaves an office with a live connection on Wi-Fi and reaches the street on cellular. Ordinary TCP ties that connection to one path. Multipath TCP can keep the application on one ordered byte stream while the endpoints add, retire and prioritise TCP subflows underneath it.…

A stream of data blocks with one missing interval, a selective range map and a targeted retransmission.

IETF

When the Receiver Drew a Map: How TCP SACK Changed Loss Recovery

TCP once told a sender only where an uninterrupted stream ended. Selective acknowledgment added a second language: a compact map of the later bytes that had already arrived. That extra evidence changed loss recovery without changing who controlled the congestion window or when…

Copper header blocks appear before navy data in the upper tray and after the same conceptual data in the lower tray

History

The Header That Waited Behind Its Data

A variable-length header could stand between an arriving packet and a useful boundary in memory. In the early 1980s, BSD systems tried moving that obstacle: put the data first and its higher-level headers afterwards, then restore the ordinary arrangement at the receiver. Trailer…

An ordered chain of DNS records with an empty interval bounded by two authenticated records.

IETF

How DNSSEC learned to prove a name does not exist

A signed answer can authenticate a record that is present. The harder design problem is authenticating the empty space where an attacker might otherwise hide a name, invent one or replace a truthful “no” with a forged response.

Nine translucent forecast windows carry changing network-cost patterns from an abstract network to an application scheduler, with one late interval highlighted in amber.

IETF

The quiet hour is only a forecast: ALTO makes traffic timing a published promise

A bulk transfer can wait for two in the morning. The harder question is why two in the morning should be cheaper at all. ALTO Cost Calendars let a network publish that expectation to an application. The calendar is useful precisely because it is not the network itself: it is an…

Two translucent TLS handshake structures connected by a persistent evidence line while a red splice path breaks before joining the authenticated channel.

History

The Handshake That Had to Remember Its Previous Handshake: TLS Renegotiation

A TLS connection could be encrypted from end to end and still tell the server the wrong story about who had sent its first bytes. The renegotiation flaw of 2009 exposed a missing form of evidence: a new handshake needed to prove not only its own keys, but also which earlier…

A tiny blue object with a copper pin and close ring sits within a much broader blue uncertainty disc

History

A Map Pin Was Not a Measurement

DNS LOC could express a coordinate to a thousandth of an arcsecond while declaring a horizontal error circle ten kilometres across. That was not a contradiction. The format distinguished the fineness of an address on a map from the strength of the knowledge behind it. A consumer…

A blue NRS-themed chain of FAQ cards preserves current, earlier and corrected answer versions.

Number Resource Society

The FAQ Answer Needs a Version Date

A frequently asked question looks like the lightest form of institutional writing. In practice, it can be the page a member reads before applying, changing details, relying on a benefit or choosing where to ask for help. When that answer has no visible date or predecessor…

A rural fibre construction manager reviews project paperwork beside cable reels while a crew works along the roadside.

North America Regional ISP Trends

BEAD awards do not become project cash until reimbursement clears

A fibre crew can finish a week's work while the contractor's payroll and the supplier's invoice fall due before the state has accepted the next BEAD payment trigger. The award may be valid, the construction eligible and the project economic, yet the subgrantee still has to…

An unlabeled network module waits in one transparent cradle beside an empty transfer cradle in a registry operations room.

Story

At LACNIC, the Most Valuable IPv4 Option Is Waiting

At LACNIC, the Most Valuable IPv4 Option Is Waiting intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The Story…