Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.

Story
RIPE Database 1.124.1 Fixed Certificate Selection. Its “No Evidence” Finding Needs a Search Boundary
RIPE NCC was right to ship a reported authentication vulnerability without waiting for a routine test interval. The next duty is different: show members what time, traffic and registry history were actually examined before “no evidence of exploitation” became the public…

IETF
Adam Roach and the Terminated Subscription That Did Not End the Resource
A control-room tile turns red: `Subscription-State: terminated`. Someone closes the incident because the monitored resource is presumed gone. Adam Roach’s SIP event specification permits no such shortcut. The subscription is certainly over; the resource may still exist, remain…

IETF
Who pays to keep a search alive?
A mailbox search can finish correctly while its request for continuing updates is refused. IMAP makes that distinction explicit. The harder question is whether the product, its resource budget and its promises to users do the same.

History
The Server Pool Was Redundant. The Address Authority Was Singular: RFC 1931
A workstation with no configured address asks a question that looks deceptively small: which IP address may I use? RFC 1931 answered with several servers, but not several truths. Dynamic RARP separated the machines that could hear and answer a request from the authority allowed…

IETF
An Enrollment Voucher Arrives After Identity Leaves the Device
A constrained device can withhold its operational identity and still disclose enough to be enrolled. In Lightweight Authorization using EDHOC, that disclosure is deliberate: an authenticated domain authenticator receives the device’s enrollment identity and sends it to a trusted…

IETF
The deadline arrived before permission to send
A scheduled email can ask a server to keep it still while a second instruction demands that it arrive sooner. SMTP's answer is not a faster queue. It is a refusal to accept incompatible obligations—and a careful division of responsibility for the promises that remain.

IETF
Scott Hollenbeck and the Transfer Lock That Could Not Explain Itself
A domain-security dashboard finds `clientTransferProhibited` and turns its badge green. The code deserves some of that confidence: in the EPP domain mapping authored by Scott Hollenbeck, a transfer request must be rejected while the status is present. But the badge has answered…

Story
APNIC’s WHOIS Archive Reports Two Totals for the Same Hour
The latest completed hour says APNIC received 3,192,583 WHOIS queries. Add the seven query types printed beside that total and the answer is 3,183,463. The missing bridge is not a rounding error; it is the meaning of the measurement.

IETF
A Cryptographic Malfeasance Report Cannot Revoke Trust
Three time servers sign answers that cannot all be true in the order they were received. Roughtime lets a client preserve that contradiction as portable cryptographic evidence. Yet the proof does not name the guilty server, appoint the reviewer, alter a trusted-server list or…

IETF
The fallback folder was not an overflow bin
A mail filter can name both a preferred role and a default folder. Sieve does not treat that pair as a licence to put mail wherever storage happens to work. The distinction protects placement consistency—and leaves someone responsible for restoring the destination that failed.

Story
A LACNIC Telecom Essay Moves Voice to IP. It Leaves Backup Power Unassigned.
A new LACNIC Blog essay catches the most consequential detail in the retirement of traditional telephony: the call may look unchanged, but its power supply has moved. That observation deserves a more exact public answer about who keeps an IP call alive when the lights go out.

History
The Gold Paper Clip Looked Decorative. It Was a Workflow Command: RFC 1927
A paper clip is legible before anyone explains it. That was the charm of RFC 1927—and the trap hidden inside its joke. The memo asked one office-supply icon to express whether documents belonged together, how they should look, which workflow should run, where an annotation…

IETF
The recovered client that could not end everyone else's grace
After an NFSv4.1 server loses its lock state, the quickest client cannot decide when the slower ones have had enough time. Recovery completion is a withdrawal of its own remaining claims, not a command to reopen the whole service.

History
The Packet Had an Alphabet and a Pitch, but No End Marker: RFC 1926
RFC 1926 could turn every nibble of an IP datagram into a Morse letter and place it on a chosen audio frequency. The difficult part begins after a receiver hears the start signal: when, exactly, has the packet ended? That small silence exposes the distance between a reversible…

Story
LACNIC's RDAP delegationSigned Records Parent DS Presence, Not DNSSEC Validation
A boolean in a registry response can look like a verdict on the security of a DNS chain. LACNIC's RDAP `delegationSigned` field answers a narrower question: whether the registration view reports DS records in the parent. It does not run a resolver, test the child keys or prove…

IETF
Henning Schulzrinne and the Ringing Response That Arrived Before Anyone Answered
A caller hears a ring and begins to wait. On a SIP trace, an engineer sees `180 Ringing` and may feel that the network has confirmed the same event. The two impressions can coincide, but they are not identical. In the protocol co-authored by Henning Schulzrinne, 180 is a…

Global Institutional Trends
FreeBSD’s GRAND Work Shows Why a Faster Hello Needs Its Own Queue Rules
An account of proactive IPv6 discovery puts the less glamorous half of an optimisation in view: limiting announcements without treating ordinary replies as expendable duplicates.

IETF
A Private Candidate Does Not Explain Why One Intent Won
Two engineers are authorized to change the same router. Each works in a private configuration branch, so neither can accidentally commit the other’s unfinished commands. Then both change the same node. The server can identify the collision and offer disciplined ways to resolve…

IETF
The SCTP association that outlives its original socket
Peeling an established association out of a shared socket can contain buffer pressure. It also moves the place where that association must be controlled and closed.

IETF
Mallory Knodel and the Censorship That Begins Before a Packet Is Dropped
A failed connection is the last frame of a longer decision. In the censorship survey co-authored by Mallory Knodel, somebody first defines what is unwanted, a system then recognizes traffic as belonging to that class, and only then does an actor interfere. Keeping those stages…
