Skip to main content

Intelligence

Latest Articles

Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.

A finite rail of cyan authority tokens reaches an amber provider-entry mechanism that transfers one token into a sealed consumed vault before a fogged external process.

CASE FILE

The Agent Timed Out. That Does Not Mean Its Budget Came Back.

A procurement agent sends a bounded order to a supplier. The call disappears into a timeout. No confirmation returns, but the supplier may already have accepted the order. At that moment, refunding the agent’s authority is not customer service; it is permission to spend twice. A…

Sep 7, 2026
Temporary connections, a finished interface and a preserved diagnostic record illustrate retiring an experiment.

CASE FILE

Who Pays to Retire an Experimental Number?

A successful network trial leaves more than working software. It leaves a dictionary of errors, tools that read it and people who depend on it. RFC 9756 makes the route to a permanent assignment clearer; someone still has to pay for the move.

Sep 7, 2026
An IPv4 option 133 format code points to a separate specification while the extended and basic security options remain paired across packet fragments.

History

The Security Label That Needed Its Own Specification

One IPv4 option could appear more than once in the same datagram, yet no occurrence was self-explanatory. Its one-byte format code pointed outward to another specification that defined what the remaining bytes meant and whether a system should accept them.

Sep 7, 2026
An unlabeled routing board sends query paths to two powered 1990s server cabinets, but only one cabinet contains the delegated zone media.

History

The Parent Named the Server. The Server Still Had No Zone: RFC 1912 and Lame Delegation

The referral worked exactly as configured. A resolver asked the parent where to find a child domain, received two name-server names and sent a query to one of them. Only then did the system reveal its mistake: the selected machine had no child zone to serve. The directory entry…

Sep 7, 2026
An archived registry card sits apart from a signed authorization, a policy ledger and a glowing live network.

Story

ARIN's Retired Origin AS Field Recorded a Possibility, Not a Live Route

Old registration exports can preserve an `Origin AS` value long after ARIN removed the field. The label looks authoritative, but ARIN defined it as an optional holder-supplied list of ASNs from which a block might originate. It was neither a cryptographic authorization nor a…

Sep 7, 2026
Editorial illustration representing real-time Internet media research, with video communication, network standards and global connectivity.

Academics

Colin Perkins: How Real-Time Media Learned to Share the Internet

Colin Perkins did not invent RTP, WebRTC or Internet congestion control. His more defensible contribution is also more revealing: over three decades, he helped develop the repair, feedback, signalling, safety and governance mechanisms that allow voice and video to remain useful…

Sep 7, 2026
AI editorial portrait of Sara Dickinson in a DNS operations setting where an encrypted path separates into processing, storage and onward-disclosure paths.

IETF

Sara Dickinson and the Resolver Promise Encryption Cannot Prove

The padlock beside a DNS resolver name is reassuring because it proves something useful: the client has protected its conversation on the way to a particular service. It is also dangerously easy to ask that icon to prove the rest. Sara Dickinson’s co-authored RFC 8932 follows the…

Sep 7, 2026
A conceptual distribution tree separates healthy branches, affected receivers and copper alarm-return paths.

CASE FILE

The Alarm Needs a Way Home

Multipoint BFD can detect a broken branch close to the receiver. Turning that local knowledge into a dependable decision at the source is a separate service—with its own paths, capacity and owner.

Sep 7, 2026
AI editorial portrait of Nurani Nimpuno against an abstract Internet number-governance backdrop.

Leaders

Nurani Nimpuno and the Accountability Layer Behind Number Governance

Internet number governance is often described through institutions and acronyms. Nurani Nimpuno’s public record reveals a more useful operating question: how can a community preserve technical discretion while making delegated authority reviewable?

Sep 7, 2026
An amber legacy credential bypasses a cyan AI security sidecar and reaches joined data plus an external output channel.

CASE FILE

An AI Safety Sidecar Is Not a Boundary If the Old Credential Still Works

The fastest way to test an AI control plane is to ignore its architecture diagram and try the connection it was meant to replace. If the old credential still completes the same join or send, the new sidecar is advice—not authority.

Sep 7, 2026
A timestamped registry record is separated from a live network topology.

Story

LACNIC Whois created Dates the Registry Record, Not the Network's Launch

A timestamp precise to the second can look like a birth certificate. In LACNIC registration data, however, `created` dates the record for an address block. It does not reveal when the holder was founded, when engineers switched on a network, when the addresses were first used, or…

Sep 7, 2026
An IPv4 packet carrying classification and protection-authority indicators passes through routers, with the same label preserved on fragments.

History

The Label the Packet Had to Carry

RFC 1108 imagined a network in which a datagram did not merely carry data and an address. It also carried a compact declaration of the protection rules that had to follow it through the route.

Sep 7, 2026
Two unlabeled clocks flank an African network map between an invoice tray, a payment channel and a receipt ledger.

Story

AFRINIC’s 5% Early-Payment Discount Runs on Two Invoice Clocks

AFRINIC's renewal calendar begins with an invoice released in November and rewards payment received by the end of December. Its accompanying prose sets the reward against a different entity: the date of the invoice. Those statements can belong to a perfectly coherent billing…

Sep 7, 2026
A 1990s workstation tracks visited nodes while traversing a branching directory graph with a stopped loop, an expanding branch and a stable handle reconnecting an old endpoint

History

The Mesh Had No Root. The Client Paid for Completeness: RFC 1914

Two clients could ask the same question and return with different directories. One stopped after a nearby server answered; the other followed referrals through a larger graph. RFC 1914 made that divergence legible: completeness was not a property printed on the first reply. It…

Sep 7, 2026
Blank record cards sit beside 1990s servers in a mesh of abstract index tokens, while a query path reaches one unavailable node.

History

The Index Knew the Word Existed. It Still Did Not Know the Answer.

Put three directory records through a Whois++ centroid and something peculiar happens. The word “Smith” survives, but the two people who carried it disappear. So do frequency, co-occurrence, order and the path by which either record was maintained. In 1996, that deliberate loss…

Sep 7, 2026
Editorial illustration of a global network telemetry system connecting distributed network locations to a central data engine.

Global Cloud Services

Kentik and the data engine that turns network flows into evidence

Kentik’s network-intelligence platform depends on a proprietary analytical engine designed to retain large volumes of telemetry, add routing and business context, and return historical answers quickly enough to guide operations. Kentik Data Engine gives network teams a searchable…

Sep 7, 2026
An org-type registry card with RIR and EU-PI labels stands between a sealed legal file and separate network routes.

Story

AFRINIC Whois org-type Classifies a Registry Relationship, Not Legal Corporate Form

AFRINIC’s `org-type` field looks deceptively familiar: a short label attached to an organisation record. Its proper use is narrower. It helps describe how that record sits inside the registry’s resource and membership system; it does not answer the legal, ownership or operational…

Sep 7, 2026
One diagnostic packet crosses a chain of routers while each hop sends a separate amber report back to the origin.

History

The Traceroute That Asked Every Hop to Write Back

Conventional traceroute makes the sender knock on the network’s doors one distance at a time. RFC 1393 proposed a more ambitious bargain: send one marked packet, and ask every router it crosses to mail back a report.

Sep 7, 2026
AI editorial portrait of Ole Trøan beside three coordinated IPv6 decision paths for source address, first hop and DNS context.

IETF

Ole Trøan and the Three Decisions NAT Used to Hide

A laptop has two globally usable IPv6 addresses, two routers and two DNS resolvers. Nothing is missing, yet the first packet can still fail: the chosen source may belong to one provider, the chosen door to another, and the chosen name answer to a third context. Ole Trøan’s…

Sep 7, 2026
A sealed cyan audit tree preserves logged AI routing events while an unlogged pulse is exposed only when independent provider and intake streams fail to balance.

CASE FILE

RMRP Can Sign Its AI Audit Log. It Still Cannot Count the Calls It Never Saw

A new model-routing draft turns silent omission into a signed assertion that can be challenged. That is a serious control improvement—but completeness still begins with a witness outside the router.

Sep 7, 2026