Intelligence

Latest Articles

Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.

An older indigo authentication hourglass connects by blue thread to a brass press with fresh ivory credentials and a separate newer issue-time hourglass; a decision sheet remains blank.

IETF

A New OAuth Token Does Not Prove Recent Authentication

Issuing a credential and authenticating its user are different events. RFC9470 makes the distinction operational: a resource can ask for stronger or more recent authentication, but neither a fresh token nor a successfully relayed challenge proves that the condition has been met.

Editorial illustration of data-centre storage infrastructure with servers, an engineer and visual references to SNIA storage standards and interoperability.

Global Institutional

SNIA writes common storage rules without the power to enforce them

Since 1997, SNIA has tried to make storage systems from different vendors easier to compare, manage and trust. Its specifications reach from management software and cloud data to media erasure, energy use and hardware form factors, yet every useful rule still depends on companies…

A brass indexing pin lies unconnected before an ivory die with a crescent cavity and a cobalt die with a radial flower cavity; a dark three-compartment slab stands at left.

Story

ARIN’s DS Payload Guide Calls Digest Type 3 MD5. IANA Says GOST

A public provisioning reference gives one DNSSEC code two incompatible identities. The correction is narrower than an API failure, but more consequential than a spelling change: the number determines the digest, and fixing its label would not make the retired algorithm suitable…

Editorial illustration of a Linux networking engineer with switchdev and devlink diagrams, switch hardware and server infrastructure.

Creators

Jiří Pírko and the Linux interfaces exposing switch hardware

A physical switch can forward packets at extraordinary speed while revealing little about the tables, limits and failures inside it. Jiří Pírko's work on switchdev and devlink helped give Linux a common language for that hidden machinery, bringing forwarding state and device-wide…

Two indigo envelopes share identical three-dot name tabs, while red and ochre query slips and gray pre-attached strips lead to different illustrated response panes.

IETF

Equivalent URNs Are Not Interchangeable Service Requests

A comparison can correctly say that two URN names identify the same resource without saying that every service request carrying those names is interchangeable. RFC8141 draws that boundary through optional components—and leaves an important existing-query case to the resolver's…

Ivory folded cards approach a brass rectangular opening; three cards sit within a large upright glass lens, and two more rest in a separate blue tray.

Story

ISIF Now Starts With a Concept Note. The Foundation Performs the First Review

A shorter opening application can widen access to Internet-development grants. It does not make the entire selection sequence an independent committee decision—and the 2026 rules do not claim that it does.

A sleeping handset's two copper dialog ribbons remain attached to an older teal chip while a local proxy carousel issues a newer ochre reference.

IETF

Changing a SIP Push Reference Must Not Abandon the Dialog

A private reference can become less useful for tracking without becoming less useful to an existing conversation. SIP push notification makes that distinction explicit: a proxy must issue fresh references, yet keep the old ones that ongoing dialogs still depend on.

Three dark relay blocks are linked in cyan; a green circle glows above the middle block, while a dotted path leads toward a separate hollow ring beyond an amber bracket.

Story

Sagan Can Mark a Traceroute Successful Without a Reply From the Destination

One Python flag tests a non-error reply at the end of the supplied trace. Another tests the destination address. Keeping those answers separate is the difference between reading a measurement and awarding it a meaning it has not earned.

Textured wordless editorial print of a navy circular ribbon carrying vermilion marks through three unbranded relay forms, two open outgoing branches, an ochre surround and a detached matching mark at the incoming edge.

IETF

A CDN Customer May Choose the Route—Not Erase Its Loop Guard

The small CDN-Loop request field draws an unusually sharp boundary: customers retain routing choices, but not the ability to erase a common safety mechanism. That boundary protects cooperation without making the field a trustworthy account of where a request has been.

Wordless material-based conceptual illustration of offset blue and ochre stencil apertures over a bounded dark guide, waiting stone beads, and two separate open branch guides inside an outer brass boundary.

IETF

The CDNI Map That Grew—and Lost Every Client

A CDNI advertisement can name more address ranges and leave fewer requests eligible. The explanation lies in how restrictions are combined—and in the decision rights that a clean-looking coverage map can quietly absorb.

A round and a diamond-shaped cyan marker lead to two small server forms, with an open amber inspection frame and question symbol behind them.

Story

AFRINIC’s Duplicate nserver Row Is Gone. Redundancy Is Not a Row Count

A February discussion exposed two identical nameserver entries that produced only one DNS referral. The named example is now corrected. What remains useful is the distinction between an avoidable input mistake, an answering server and infrastructure that can survive a failure.

Wordless conceptual illustration of two envelopes with solid green and hollow amber circles in one walnut reporting tray, separate conduits to an empty pale cabinet and a dark cabinet with a crate, and a gated replacement crate on a loading bridge.

IETF

CDNI’s Complete Collection Is Not an All-Success Receipt

A publisher preparing replacement content needs to know that an earlier purge has finished. A tidy reporting collection can answer a different question: whether another status update will arrive. CDNI keeps those meanings separate, and the next release decision must do the same.

Wordless conceptual illustration of a partly spent upright hourglass carried on a wheeled tray through three server handoffs, with gloved hands, generic seals and a separate hourglass behind a closed renewal gate.

IETF

CDNI Redirection Must Not Restart the Token’s Expiry Clock

A delivery network may change the next recipient, sign a new route and record a new issuance time. Under the CDNI URI Signing profile, none of those changes gives ordinary redirection permission to reset an existing expiry. Segment-token renewal is a different, explicitly enabled…

A teal renewal ring surrounds a transparent cache holding an amber decision plate, beside an independent hourglass.

Story

Two Minutes Can Become Many in LACNIC’s Permission Cache

A public PAI client can restart the age of a cached permission entry after a malformed authorization reply without obtaining a new permission decision. Its small resilience mechanism exposes a larger question: which clock should govern an application when the authority it…

AI editorial portrait of Urs Hölzle with a modular datacentre-network background.

History

Urs Hölzle and the Fabric That Learned to Change in Pieces

An awkward failure in an early Google network helps explain a less visible infrastructure achievement: making a vast switching system serviceable without treating it as one indivisible machine.

Two distinct transparent measurement cartridges feed one output socket beside layered build-history silhouettes.

Story

Starla Uses RIPE Atlas Version Numbers. They Do Not Name Its Executable.

A Rust implementation can speak the probe’s language without becoming the same measuring instrument. Starla makes the distinction visible in source: its own package version, its compatibility numbers and its registration identity answer different questions.

Wordless conceptual illustration of two matching glass page frames, a provisional teal marker, an active amber marker and a gloved hand aligning the final amber decision route beside a miniature server.

IETF

No-Vary-Search Needs an Activation Boundary for Client-Side Decisions

Two URLs can justify reusing the same server response while still representing different choices by a reader. When a prerendered page is activated under a different query, the application must bind its decisions to that final choice—not to the address it happened to inspect…

Editorial illustration of network flow telemetry moving from routers through analytics and storage systems into traffic monitoring dashboards.

Global Institutional

Akvorado turns sampled flows into a network’s working memory

Akvorado gives network operators a self-hosted way to retain, enrich and examine flow records across long periods. Its usefulness comes from making the path from router export to operational decision visible; its central limit is that every graph still inherits the sampling…

Editorial illustration of a network architect with routing diagrams, server infrastructure and BGP, OSPF and IS-IS network concepts.

Creators

Russ White and the discipline of containing network complexity

Russ White and the discipline of containing network complexity intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The…

AI editorial portrait of Ermanno Pietrosemoli with a Mediterranean sea and long-distance radio research background.

History

Ermanno Pietrosemoli and the Sea Link Whose Peak Was Not a Promise

In a picture used to teach long-distance wireless planning, the equipment has been running for days but the link counter has been running for minutes. Both numbers can be true. Ermanno Pietrosemoli's work on a remarkable radio crossing between Sardinia and Tuscany makes that…