Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.
IETF
The BIER Attribute Reached the Border. The Neighboring Domain Was Not Authorized: RFC 9793
RFC 9793 gives BGP a way to carry the identifiers and encapsulation inputs from which a BIER router can calculate forwarding state. It also draws a harder line than the attribute's transitive flag suggests: at an EBGP administrative boundary, carriage is denied by default, and a…
IETF
HTTP/2 Rapid Reset: The Protocol Was Revised. Who Proves the Repair Reached the Internet?
The HTTP/2 Rapid Reset episode exposed a gap that standards documents cannot close on their own. A protocol rule can permit a sequence of actions; a security researcher or operator can show how that sequence becomes an attack; a working group can review the behavior; and vendors…
History
Before Email Could Be Signed, the Gateway Had to Stop Editing It: RFC 2015
A mail gateway could preserve every sentence a person cared about and still destroy a digital signature. RFC 2015 made that uncomfortable fact part of PGP/MIME's design: the evidence was not an abstract message but an exact MIME entity—content headers, transfer encoding…
ICANN
ICANN’s Authority Chain: From Institutional Mandate to Contractual Remedy
ICANN’s power over the domain-name system is easiest to misunderstand when it is treated as a single grant of authority. The public record describes something more layered: institutional powers and accountability rules in the Bylaws, operational obligations in registry and…
IETF
Three Names, One File, No Proof of What Loaded
An unversioned YANG module, a revision-dated copy and a semantic-version copy can be byte-for-byte identical. That is useful repository hygiene. It is not a load receipt, a compatibility verdict or permission to roll the schema into production.
Global Institutional
DFINFRA and AS210860: The Missing Link Between Registration and Operational Control
DFINFRA and AS210860: The Missing Link Between Registration and Operational Control intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that…
IETF
A Previous HTTP Upgrade Success Cannot Confirm the Next Protocol Transition
The proxy has seen this transition work a thousand times. It sends an HTTP/1.1 CONNECT request, expects the familiar success, and lets the application’s first bytes follow immediately. On attempt 1,001 the destination is unavailable and the proxy rejects the tunnel. The bytes…
IETF
Neal Cardwell and the Loss Detector That Trusted Time Over Duplicate ACKs
Three duplicate acknowledgments once served TCP as a rough witness to loss. They are not a clock, and they say little when a transfer ends before a third witness arrives. RFC 8985 replaces that counting habit with a temporal test: later-sent data must be known delivered, then…
Story
Rapport Tests Cache Survival. Its Missing-Manifest Warning Is Still Commented Out
LACNIC’s young RPKI test suite preserves the right routes when a manifest disappears; the quieter question is whether the person responsible for those routes is demonstrably told why they are now coming from cache.
Global Institutional
The Dependency Chain Behind ISC Software
ISC’s BIND and Kea influence network resilience through a chain that runs from upstream release work to distributor packaging and operator-controlled recovery. The public record documents important mechanisms and distribution channels. It does not show how many operators deploy…
Story
RIPE NCC's Archived May GM Page Is Showing October's Live Registration Table
The October 2026 General Meeting page carried a live country-by-country registration count. At the same instant, the archived page for May displayed precisely the same 37 rows and 231 votes, although May's final report records 3,421 registrations and 3,049 ballots cast. The…
History
The List Expired on 16 June: RFC 2000 and the Two Axes of Protocol Status
RFC 2000 was itself an Internet Standard, yet it carried a use-by date. That was not a paradox. The document was authoritative as a dated classification, not a permanent measurement of what the Internet had implemented.
Global Regional ISP
INFINITYWIFI: Three Different Meanings of Network Control
INFINITYWIFI: Three Different Meanings of Network Control intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The Global…
ICANN
ICANN’s Authority Is a Chain, Not a Crown
ICANN can influence the global domain-name system without being a government. Its practical authority is assembled across several instruments: a California nonprofit charter, corporate bylaws, multistakeholder policy procedures, contracts with registries and registrars, technical…
Global Institutional
DFINFRA and AS210860: The Control Chain Is Defined, but Not Yet Proven
DFINFRA and AS210860: The Control Chain Is Defined, but Not Yet Proven intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow.…
IETF
A Valid YANG Schedule Is Not Evidence That Its Action Is Still Authorized
At 02:00, a controller executes the seventh occurrence of a maintenance schedule created six months earlier. The recurrence is enabled, its version is current, the clock is trusted and no scheduling conflict is reported. Yet the team that approved the action has been reorganized…
IETF
Shumon Huque and the Extension Pin That Promised Evidence, Not DANE Forever
A service can promise to keep answering a security question without promising that tomorrow’s answer will match today’s. That is the subtle bargain inside RFC 9102. The TLS DNSSEC Chain extension can pin a server’s obligation to deliver verifiable DNSSEC evidence, yet still…
Europe and Middle East Regional ISP Trends
Poyraz Hosting’s AS210574: What the Public Record Still Cannot Establish
Poyraz Hosting’s AS210574: What the Public Record Still Cannot Establish intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may…
ICANN
ICANN’s Authority Is Contractual Before It Is Public
ICANN can influence the global identifier system without being a government and without possessing unilateral control over every technical action that follows its decisions. Its authority is assembled from several instruments: corporate bylaws, operational agreements, registry…
IETF
The Diff Was Classified. The Upgrade Was Not Proven
Revision 09 of the YANG schema-comparison draft can produce a disciplined account of what changed between two schema revisions. Its editorial, backwards-compatible and non-backwards-compatible labels are valuable precisely because they are narrow: they describe the comparison…