Revocation of X.509 certificates
‘Revocation is broken’ is a catchphrase in the world of certificates and Certificate Authorities. Certification infrastructure may not have been designed for the Internet of today.
‘Revocation is broken’ is a catchphrase in the world of certificates and Certificate Authorities. Certification infrastructure may not have been designed for the Internet of today.
Geoff Huston attended NZNOG 2026, and shares some of what he found interesting.
Understanding how different platforms count time — and when those counters expire — is essential for operators preparing their systems for the next wave of rollover milestones.
Geoff Huston explains the reasons for the CIDR Report, what’s in it, and shares some thoughts as to its usefulness to the Internet routing community today.
A look at how a consistent time standard is spread across the Internet, and the recent efforts to add an aspect of security to Network Time Protocol (NTP).
How much of the Internet user base can reliably access a DNS server where the only form of access is via IPv6?
Geoff Huston shares his notes from attending NANOG 96.
A trick that lets you map an IP address to an ASN without preprocessing any data.
Mapping Internet number resources from IP addresses to organizations is straightforward using whois or RDAP, but listing all resources held by a given organization is far more challenging. This post explores a simpler, data-driven approach using RIR extended statistics and reg-id identifiers.
What IPv4 and IPv6 addressing in 2025 tells us about the changing nature of the network.