Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.
Global Cloud Services Trends
Workiva’s large-contract growth has an acquisition clock inside it
Workiva’s largest customer tiers are expanding much faster than its total customer count. That looks like a clean enterprise-upmarket story until one sentence in the filing changes the perimeter: customers acquired with Sustain.Life enter the customer count and…
CASE FILE
One Color Crossed Three ASes. It Never Became an SLA: RFC 9723
A low-latency color can survive every BGP hop and still fail to buy low latency. RFC 9723 gives SRv6 operators a compact way to propagate intent through colored locator prefixes; it does not merge the intent dictionary, route installation, packet path and customer outcome into…
Global Cloud Services Trends
Expensify’s card growth fails the two-rebate test
Expensify’s headline card number looks uncomplicated: interchange revenue rose 12% in the second quarter of 2026. The income statement tells a more demanding story. Customer cashback grew faster and reduced revenue, while a Visa volume incentive that reduces cost of revenue fell…
History
Stephen Casner and the Timestamp That Was Not a Clock
Two packets leave in sequence and carry the same timestamp. That looks like a broken clock only if the number is asked to describe transmission. In RTP, the two packets may simply be fragments of one video frame. Stephen Casner and his coauthors made that distinction part of the…
IETF
TLS close_notify Ends a Sending Stream, Not an Application Transaction
An orderly TLS ending can arrive after the last encrypted bytes and still say nothing about whether an invoice was booked, an order was accepted or a database committed. `close_notify` closes a cryptographic sending direction. Treating it as a business receipt makes a transport…
Global Cloud Services Trends
Klaviyo’s Shopify toll sits below gross margin
Klaviyo reported a 72.6% gross margin in the second quarter of 2026. That number describes what remained after the costs classified as delivering its service. It does not include a separately disclosed toll attached to one of the most important routes into that service. Shopify…
Story
RIPEstat Explains 12859:4000 With 12859:4xxx. The Wildcard Is Evidence
RIPEstat’s Looking Glass can place a useful sentence beside an opaque BGP community. In one frozen response, however, the observed value `12859:4000` received the description “customer routes” from the broader expression `12859:4xxx`. The explanation may be right. The missing…
History
Sharon Goldberg and the Packet That Told a Clock to Stop Asking
The dangerous packet was not large, fast or obviously hostile. It looked like a time server asking a client to back away. In the `ntpd` versions studied by Sharon Goldberg and three collaborators, that courtesy message could be forged—and its requested silence could last far…
Global Cloud Services Trends
SailPoint’s AI ARR needs a renewal-status column
SailPoint has put a number on its new AI business: more than US$70 million of annual recurring revenue. The number is useful precisely because it is not yet a revenue line. Its definition can keep a contract in the count after expiry while a renewal or replacement deal is still…
History
Anja Feldmann and the Traffic Matrix No Single Link Could Reveal
A red link on a network map looks like an answer: this is where the load is. For Anja Feldmann and her collaborators, it was only the start of the question. The counter could not say which demands had converged there, which routing decisions had brought them together, or where…
Story
AFRINIC’s Uganda Anycast Node Is Two Services, Not One
AFRINIC’s Uganda Anycast Node Is Two Services, Not One intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The Story…
IETF
Max-Forwards Counts HTTP Hops, Not Organizational Authority
Max-Forwards gives an HTTP client a small diagnostic budget: a TRACE or OPTIONS request may cross only so many forwarding steps before an intermediary must answer. That counter is useful precisely because it is narrow. It does not reveal how many companies are involved, certify…
History
Jerry Saltzer and the Link That Carried a Name but No Permission
A path can tell a computer where a file is without answering whether the person following it may read the file. Jerry Saltzer’s account of protection in Multics turned that separation into an operating rule—and exposed how much revocation, audit and institutional power can be…
IETF
Accept-Patch Advertises Patch Formats, Not Permission to Modify
A server can tell clients which patch-document languages it understands without deciding who may change a resource. RFC 5789 gives that discovery statement a name, Accept-Patch, and keeps capability, format semantics, current state and write authority as separate questions.
CASE FILE
The Stream Was Created. The Broadcast Was Not: RFC 9725
A WHIP endpoint can return `201 Created` while the programme remains black. RFC 9725 makes low-latency contribution easier to start; it also makes it essential to distinguish the HTTP resource from the media path, the production chain and the audience result.
Story
Rapport’s Forbidden-AKI Test Starts at Barry, Not at the Validator
A conformance test cannot prove that a validator rejected a forbidden certificate field until it proves that the field reached the certificate. A September correction to one LACNIC Rapport fixture makes that dependency unusually visible. The change replaces a scalar value that…
History
Eve Schooler and the Invitation That Did Not Carry the Conversation
The most consequential line in an Internet call is not the one carrying a voice. It is the one that finds the other person, proposes a session and then gets out of the way. Eve Schooler’s path from experimental conference control to the early Session Initiation Protocol helps…
IETF
Content-Location Describes a Representation, Not Where the Client Must Go
An HTTP response can identify the resource corresponding to the document it carries without changing the address that was requested. RFC 9110 calls that field `Content-Location` and makes the boundary explicit: it is representation metadata, not a replacement target or an…
CASE FILE
RFC 9727 Put the APIs in a Catalog. It Did Not Put the Catalog in Charge
The most dangerous API inventory can be perfectly formatted. Its links validate, its cache is warm, and its obsolete interface is gone from the list. None of those facts says what is still listening on the network.
IETF
103 Early Hints Can Start a Fetch, Not Settle the Response
A web server can reveal part of its likely answer before it has decided the answer itself. RFC 8297 makes that useful without making it authoritative: a 103 response can fund preparation, while the final response alone settles what the request produced.