Internet Timeline
60 key moments in internet history — from ARPANET to modern protocols.
1960s
First ARPANET Message
On October 29, 1969, Charley Kline at UCLA sent the first message over ARPANET to Bill Duvall at the Stanford Research Institute, intending to type 'LOGIN' but crashing the system after only 'LO'. This event marked the first host-to-host communication on the precursor network to the modern internet, demonstrating that packet-switched networking between geographically separated computers was feasible.
1970s
First Email Program
Ray Tomlinson of BBN Technologies sent the first network email between two machines on ARPANET and chose the '@' symbol to separate the user name from the host name, establishing the address format still in use today. His program SNDMSG/READMAIL was the first implementation of email as a store-and-forward messaging system across a network, laying the foundation for all subsequent email protocols including SMTP, POP3, and IMAP.
TCP/IP Concept Paper
Vint Cerf and Bob Kahn published 'A Protocol for Packet Network Intercommunication,' introducing the foundational concepts of TCP/IP — a layered, end-to-end, packet-switched networking architecture designed to interconnect heterogeneous networks. This paper introduced the concept of a 'gateway' (later called a router) and the principles of internetworking that underpin the entire modern internet.
First Spam Email
Gary Thuerk of Digital Equipment Corporation sent an unsolicited commercial message to approximately 400 ARPANET users advertising DEC's new DECSYSTEM-20 computers, making it the first documented instance of email spam. The message provoked strong negative reactions from recipients and foreshadowed the spam problem that would eventually consume a majority of all internet email traffic.
1980s
TCP/IP Specification (RFC 791 & 793)
The Internet Protocol version 4 (RFC 791) and Transmission Control Protocol (RFC 793) were formally published, providing the definitive specifications for the two core protocols of the internet suite. RFC 791 defined the 32-bit IPv4 address space, packet fragmentation, and best-effort delivery, while RFC 793 defined the reliable, connection-oriented TCP segment format, three-way handshake, and flow control.
ARPANET Flag Day — Switch to TCP/IP
On January 1, 1983, ARPANET completed its mandatory cutover from the older NCP (Network Control Program) protocol to TCP/IP, a transition known as 'Flag Day.' This single coordinated switch — requiring all hosts to upgrade simultaneously — established TCP/IP as the universal protocol suite for internetworking and is considered the true birth date of the modern internet.
DNS Designed (RFC 882 & 883)
Paul Mockapetris published RFC 882 and RFC 883 (later superseded by RFC 1034 and 1035), introducing the Domain Name System as a hierarchical, distributed database to replace the single HOSTS.TXT file that had been manually distributed to all ARPANET hosts. DNS decentralized name resolution, enabled the internet to scale to billions of hosts, and introduced concepts such as zones, authoritative servers, and recursive resolution that remain in use today.
NSFNET Established
The National Science Foundation Network (NSFNET) was established to connect five supercomputer centers across the United States, initially at 56 Kbps and later upgraded to T1 (1.544 Mbps) and T3 (45 Mbps) speeds. NSFNET became the backbone of the civilian internet throughout the late 1980s and early 1990s, connecting universities and research institutions until its decommissioning in 1995 when commercial internet providers took over backbone routing.
First .com Domain Registered (symbolics.com)
Symbolics, Inc. registered symbolics.com on March 15, 1985, making it the first .com domain name ever registered under the newly operational Domain Name System. This event marked the beginning of the commercial internet era and the domain name industry, preceding the explosive growth of .com registrations that would come with the World Wide Web in the 1990s.
IETF Founded
The Internet Engineering Task Force (IETF) was founded in January 1986 as the principal body responsible for developing and promoting voluntary internet standards through open, consensus-based processes culminating in Request for Comments (RFC) documents. The IETF operates with no formal membership and follows the motto 'rough consensus and running code,' and it has produced thousands of RFCs defining the protocols that form the foundation of the modern internet.
Morris Worm — First Major Internet Worm
Robert Tappan Morris released the first widely destructive internet worm from MIT, exploiting vulnerabilities in Unix sendmail, fingerd, and rsh/rexec services to self-replicate across approximately 6,000 machines — roughly 10% of the then-connected internet. The incident led directly to the creation of CERT/CC (Computer Emergency Response Team) and raised widespread awareness of internet security vulnerabilities, effectively launching the field of computer security incident response.
Tim Berners-Lee Proposes the World Wide Web
Tim Berners-Lee submitted his proposal 'Information Management: A Proposal' to his supervisor at CERN, outlining a hypertext-based information management system that would become the World Wide Web. The proposal described a distributed system using URLs, HTML, and HTTP layered on top of the internet's TCP/IP infrastructure, ultimately transforming the internet from an academic tool into a global medium for information, commerce, and communication.
1990s
ARPANET Decommissioned
ARPANET, the pioneering packet-switched network that had served as the backbone of academic and military networking since 1969, was formally decommissioned in June 1990 after NSFNET had fully superseded it as the internet backbone. The shutdown of ARPANET marked the completion of the transition from a government-funded research network to a decentralized, commercially operated global internet.
First Website Goes Live (CERN)
Tim Berners-Lee published the world's first website at CERN on August 6, 1991, describing the World Wide Web project itself and explaining how to set up a web server. The site ran on a NeXT computer and used the HTTP protocol and HTML markup language that Berners-Lee had developed, demonstrating the complete web stack for the first time and beginning the era of the public World Wide Web.
NCSA Mosaic Browser Released
The National Center for Supercomputing Applications (NCSA) released Mosaic 1.0, the first web browser to display inline images alongside text, dramatically lowering the barrier to internet use for non-technical users. Mosaic's intuitive graphical interface sparked explosive growth in web usage and inspired subsequent browsers including Netscape Navigator and Internet Explorer, launching the consumer internet era.
Netscape Navigator Released
Netscape Communications released Netscape Navigator, a commercial web browser derived from Mosaic that introduced significant improvements in speed, reliability, and security. Navigator rapidly captured over 90% of the browser market, and Netscape's November 1995 IPO — then the second-largest in U.S. history — ignited the dot-com boom and demonstrated the commercial potential of the World Wide Web.
SSL Protocol Released (Netscape SSL 2.0)
Netscape Communications released SSL (Secure Sockets Layer) version 2.0, the first widely deployed protocol for encrypting web traffic between browsers and servers. SSL introduced the certificate-based authentication model and symmetric session key exchange that evolved through SSL 3.0 and TLS 1.0–1.3, underpinning the security of virtually all HTTPS connections on the web today.
Apache HTTP Server Released
The Apache HTTP Server project publicly released version 0.6.2, a freely available web server derived from the NCSA httpd server with a collection of patches. Apache quickly became the most widely deployed web server on the internet, capturing over 50% of all web server deployments by 1996 and remaining dominant for decades, demonstrating the power of open-source collaborative development for core internet infrastructure.
Amazon.com Launches
Jeff Bezos launched Amazon.com as an online bookstore on July 16, 1995, processing its first customer order shortly thereafter. Amazon pioneered techniques for e-commerce at scale — including personalized recommendations, customer reviews, and one-click ordering — and its subsequent expansion into cloud computing (AWS) would fundamentally reshape the internet infrastructure landscape.
eBay Founded
Pierre Omidyar launched AuctionWeb — later renamed eBay — on September 4, 1995, creating one of the first large-scale peer-to-peer marketplaces on the internet. eBay demonstrated that the internet could enable trusted transactions between strangers at global scale and became a template for platform-based commerce, influencing marketplace design for decades.
RFC 1918 — Private IP Address Space
RFC 1918 was published, reserving three IPv4 address ranges (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16) as private, non-routable address space for use within organisations without consuming public IP allocations. Combined with Network Address Translation (NAT), RFC 1918 allowed the internet to scale far beyond the theoretical limits of the 32-bit IPv4 address space and remains foundational to virtually every home and enterprise network today.
RFC 2068 — HTTP/1.1 Specification
RFC 2068 published the HTTP/1.1 specification, introducing persistent connections, chunked transfer encoding, virtual hosting via the Host header, and improved caching semantics compared to HTTP/1.0. HTTP/1.1 became the dominant web protocol for over 15 years and its successor RFC 2616 (1999) refined the standard further; the protocol's fundamentals are preserved in the modern RFC 9110–9112 series.
IPv6 Specification Published (RFC 2460)
RFC 2460 formally defined Internet Protocol version 6, expanding the address space from 32 bits (IPv4, ~4.3 billion addresses) to 128 bits (IPv6, ~340 undecillion addresses) to solve the looming IPv4 exhaustion problem. IPv6 also introduced stateless address autoconfiguration (SLAAC), mandatory IPsec support, simplified header format, and built-in multicast; its deployment accelerated significantly after IANA exhausted its IPv4 free pool in 2011.
IEEE 802.11 Wi-Fi Standard Released
The IEEE published the original 802.11 wireless LAN standard, specifying data rates of 1 and 2 Mbps in the 2.4 GHz ISM band using DSSS or FHSS radio techniques. Although initial deployments were limited by cost and speed, 802.11 established the foundation for Wi-Fi, which subsequent revisions (802.11b, a, g, n, ac, ax / Wi-Fi 6) evolved into the dominant wireless networking technology used by billions of devices.
Google Founded
Larry Page and Sergey Brin incorporated Google, Inc. in September 1998, having developed the PageRank algorithm as Stanford PhD students to rank web pages by the quality and quantity of inbound links. Google's superior search relevance quickly displaced existing search engines, and its subsequent development of advertising, cloud, and infrastructure services made it one of the most influential forces shaping the modern internet.
ICANN Established
The Internet Corporation for Assigned Names and Numbers (ICANN) was incorporated on September 18, 1998, taking over responsibility for managing the DNS root zone, IP address allocation, and protocol parameter assignment from the U.S. government and IANA. ICANN introduced a multi-stakeholder governance model for internet naming and numbering, and its policies directly affect the allocation and delegation of top-level domains and IP address blocks globally.
RFC 2401 — IPsec Architecture
RFC 2401 defined the IPsec (IP Security) architecture, specifying a suite of protocols — including AH (Authentication Header) and ESP (Encapsulating Security Payload) — for authenticating and encrypting IP packets at the network layer. IPsec became the basis for site-to-site VPNs, remote-access VPNs, and the mandatory security layer in IPv6, and its successor RFC 4301 further refined the architecture for modern deployments.
Napster Launches
Shawn Fanning and Sean Parker launched Napster in June 1999, creating the first widely used peer-to-peer file sharing service that allowed users to share MP3 audio files directly with each other via a centralised index server. At its peak Napster had 80 million registered users, demonstrating the internet's capacity for mass content distribution while triggering landmark copyright litigation that shaped digital rights law and the development of legitimate streaming services.
First Major BGP Hijack Incident
In April 1997, AS7007 accidentally announced routes for more than 70,000 IP prefixes belonging to other networks, causing a widespread BGP routing table collapse that disrupted internet connectivity globally for several hours. This incident (often cited as the first major BGP hijack) exposed the internet's inherent trust model in routing and spurred development of BGP security mechanisms such as RPKI and prefix filtering best practices codified in later RFCs.
RSS (RDF Site Summary) Specification Released
Netscape engineer Dan Libby released the RSS 0.9 specification in March 1999, followed by RSS 0.91 in July, creating a standardized XML format for syndicating web content such as news headlines and blog posts. RSS enabled the aggregator ecosystem and the concept of subscribing to content feeds, forming the technical foundation for podcast distribution and influencing the design of modern content delivery APIs.
2000s
Mafiaboy DDoS Attacks on Yahoo, CNN, and eBay
A 15-year-old Canadian hacker known as Mafiaboy launched distributed denial-of-service attacks against major websites including Yahoo, CNN, eBay, and Dell, taking them offline for hours. The attacks highlighted the vulnerability of major internet infrastructure to coordinated volumetric flooding and prompted renewed focus on DDoS mitigation strategies. The incident became a landmark case in cybercrime prosecution and shaped early thinking about internet security policy.
RFC 2827 Published — BCP 38 Ingress Filtering
RFC 2827 formalized Best Current Practice 38 (BCP 38), establishing guidelines for network ingress filtering to defeat denial-of-service attacks that rely on IP source address spoofing. The document recommended that ISPs filter packets entering their networks with source addresses that could not have originated from their customers. BCP 38 remains a foundational anti-spoofing recommendation that, despite widespread endorsement, still sees incomplete deployment decades later.
SQL Slammer Worm Spreads Globally in 10 Minutes
The SQL Slammer worm exploited a buffer overflow vulnerability in Microsoft SQL Server and spread to roughly 75,000 hosts within 10 minutes of release, doubling its infection count every 8.5 seconds. The worm generated massive UDP traffic that congested backbone links worldwide, disrupting ATMs in the United States, causing airline flight delays, and briefly knocking South Korea largely offline. Slammer demonstrated how a single compact worm packet could weaponize the internet's own bandwidth against itself.
First Discussions of Free Public Certificate Authorities
Early 2003 saw influential security researchers and internet policy advocates begin formally discussing the need for a free, automated, and open certificate authority to eliminate financial barriers to HTTPS adoption. The prohibitive cost and complexity of obtaining TLS certificates from commercial CAs kept the vast majority of websites on unencrypted HTTP. These discussions seeded the conceptual foundation that would eventually lead to the creation of Let's Encrypt over a decade later.
Facebook Launches from Harvard Dormitory
Mark Zuckerberg launched TheFacebook.com from his Harvard dorm room, initially restricted to Harvard students before expanding to other universities and eventually the global public in 2006. Facebook's growth fundamentally shifted how billions of people used the internet, driving enormous demand for HTTP-based social applications and accelerating CDN and data center infrastructure build-out. It became the largest consumer-facing web application in history, reshaping advertising, politics, and communication worldwide.
Mozilla Firefox 1.0 Released
Mozilla released Firefox 1.0, offering a standards-compliant, extensible alternative to Internet Explorer that had dominated the browser market since the first browser war. Firefox's emphasis on open web standards, tabbed browsing, and security features reignited competition in the browser market and accelerated adoption of modern HTML, CSS, and JavaScript capabilities. The browser's success helped establish the principle that open-source software could compete with and improve upon proprietary incumbents.
YouTube Founded
Chad Hurley, Steve Chen, and Jawed Karim founded YouTube, creating the first scalable platform for user-uploaded video streaming over standard HTTP connections. YouTube's rapid adoption drove unprecedented demand for last-mile bandwidth and fundamentally altered internet traffic patterns, with video eventually accounting for the majority of all consumer internet traffic. The platform's success accelerated the transition from Adobe Flash to HTML5 video and propelled the development of adaptive bitrate streaming protocols.
AWS Launches S3 and EC2 — Cloud Computing Era Begins
Amazon Web Services publicly launched Simple Storage Service (S3) in March 2006 followed by Elastic Compute Cloud (EC2) in August 2006, effectively creating the modern cloud computing market. AWS transformed internet infrastructure by allowing startups and enterprises to provision compute and storage capacity on-demand over standard IP networks without owning physical hardware. This shift democratized internet-scale infrastructure and accelerated the pace of web application development globally.
IPv6 Specification Updated with RFC 4291 and RFC 4443
RFC 4291 obsoleted RFC 2373 to provide a comprehensive update to IPv6 addressing architecture, clarifying address types, scopes, and special-purpose prefixes, while RFC 4443 updated ICMPv6. These revisions cleaned up ambiguities in the original IPv6 specification that had led to inconsistent implementations across operating systems and networking equipment. The updates were a necessary step toward making IPv6 deployment more predictable and interoperable as the exhaustion of IPv4 addresses loomed on the horizon.
iPhone Launches — Mobile Internet Era Begins
Apple released the original iPhone, combining a full-featured web browser with cellular and Wi-Fi connectivity in a touchscreen device that fit in a pocket. The iPhone's success created massive demand for mobile-optimized web content, accelerating the shift to HTTPS, responsive design, and low-latency protocols. Mobile devices surpassed desktop computers as the primary means of internet access within a decade, fundamentally reshaping how HTTP, DNS, and TLS were implemented and optimized.
GitHub Launches — Collaborative Code Hosting at Scale
Tom Preston-Werner, Chris Wanstrath, and PJ Hyett launched GitHub, building a web-based platform around the Git distributed version control system. GitHub transformed open-source software development by making collaboration, forking, and pull requests accessible through a browser interface backed by HTTPS and SSH. Its rapid growth influenced the development of countless internet protocols and standards as developers worldwide used it to coordinate work on open-source networking software, drivers, and operating system kernels.
Bitcoin Whitepaper Published by Satoshi Nakamoto
An anonymous author under the pseudonym Satoshi Nakamoto published 'Bitcoin: A Peer-to-Peer Electronic Cash System,' describing a decentralized digital currency secured by cryptographic proof-of-work rather than trusted third parties. Bitcoin's underlying peer-to-peer network protocol used TCP for node communication and demonstrated that distributed consensus could be achieved over the public internet without central coordination. The whitepaper spawned an entirely new class of internet-native financial infrastructure and cryptographic protocol design.
2010s
World IPv6 Day Announced by ISOC
The Internet Society announced World IPv6 Day, scheduled for June 8, 2011, calling on major websites and ISPs to enable IPv6 for a 24-hour global trial. The initiative was a coordinated response to the impending exhaustion of the IANA IPv4 address pool and aimed to surface and resolve dual-stack deployment issues before IPv4 addresses ran out. The trial successfully demonstrated that millions of users could access major websites over IPv6 without disruption, building confidence for the permanent World IPv6 Launch in 2012.
IANA IPv4 Address Pool Exhausted
The Internet Assigned Numbers Authority allocated its last two blocks of IPv4 addresses to APNIC, depleting the central IANA pool to zero and triggering the final distribution of remaining addresses to Regional Internet Registries. This milestone confirmed that IPv4's 32-bit address space of approximately 4.3 billion addresses could no longer accommodate global internet growth without mechanisms such as NAT and CGNAT. The event accelerated commercial IPv6 deployment and forced ISPs to adopt address-sharing technologies with their own latency and security trade-offs.
World IPv6 Launch — Permanent Dual-Stack Deployment
On June 6, 2012, the Internet Society coordinated a permanent enabling of IPv6 by major ISPs, home router manufacturers, and websites including Google, Facebook, and Bing. Unlike the 2011 trial day, this launch was intended to be permanent, with participants committing to keep IPv6 enabled indefinitely on their production networks. The event marked the practical beginning of the IPv6 era for consumer internet services and drove router vendors to ship IPv6-capable firmware by default.
Snowden NSA Surveillance Leaks Begin
Former NSA contractor Edward Snowden began leaking classified documents to The Guardian and The Washington Post, revealing the existence of PRISM and other mass surveillance programs that collected internet communications metadata and content at scale. The disclosures demonstrated that the unencrypted internet was being systematically monitored by intelligence agencies and had profound effects on encryption adoption. The leaks accelerated deployment of TLS, HTTPS-everywhere initiatives, end-to-end encryption in messaging apps, and motivated the standardization of TLS 1.3.
Heartbleed Vulnerability Disclosed (CVE-2014-0160)
Security researchers at Codenomicon and Google Security disclosed Heartbleed, a critical buffer over-read vulnerability in the OpenSSL implementation of the TLS heartbeat extension that allowed attackers to read up to 64KB of server memory per request without authentication. The bug had existed in OpenSSL for over two years and affected an estimated 17% of all HTTPS servers on the internet, potentially exposing private keys, session tokens, and user passwords. Heartbleed triggered mass certificate revocations, emergency patching campaigns, and lasting reform of how critical open-source cryptographic libraries are funded and audited.
HTTP/2 Specification Finalized (RFC 7540)
The IETF finalized HTTP/2 (published as RFC 7540 in May 2015), the first major revision to the HTTP protocol since 1997, based on Google's SPDY protocol. HTTP/2 introduced binary framing, multiplexed streams, header compression via HPACK, and server push over a single TCP connection, dramatically reducing latency for web page loads. The new protocol addressed the head-of-line blocking and multiple connection overhead that had plagued HTTP/1.1 performance and was quickly adopted by all major browsers and CDN providers.
Let's Encrypt Enters Public Beta
Let's Encrypt, a free and automated certificate authority operated by the Internet Security Research Group, opened its public beta, enabling any website operator to obtain a trusted TLS certificate at no cost using the ACME protocol. Within months of general availability, Let's Encrypt became the world's largest certificate authority by number of active certificates issued. The service is widely credited with driving HTTPS adoption from roughly 40% to over 80% of web traffic by eliminating the financial and operational barriers to obtaining certificates.
Mirai Botnet DDoS Attack on Dyn DNS
The Mirai botnet, composed primarily of compromised IoT devices running Linux, launched a massive DDoS attack against Dyn, a major DNS provider, disrupting access to dozens of major websites including Twitter, Netflix, Reddit, and GitHub for millions of users across the Eastern United States and Europe. The attack peaked at approximately 1.2 Tbps of traffic and demonstrated that insecure consumer IoT devices could be weaponized to take down critical internet infrastructure. Mirai's source code was subsequently released publicly, spawning hundreds of derivative botnets.
WannaCry Ransomware Global Attack
The WannaCry ransomware cryptoworm spread across 150 countries in a single day, infecting over 230,000 Windows computers by exploiting EternalBlue, an NSA-developed exploit for the SMB protocol leaked by the Shadow Brokers group. The attack caused an estimated $4 to $8 billion in damages and critically disrupted the UK's National Health Service, forcing hospitals to cancel operations and divert ambulances. WannaCry underscored the catastrophic consequences of unpatched vulnerabilities in networked systems and the risks of nation-state offensive cyber capabilities.
GDPR Enforcement Begins in the European Union
The European Union's General Data Protection Regulation came into full enforcement effect, establishing comprehensive rules for how organizations collect, store, and process personal data of EU residents regardless of where the organization is located. GDPR imposed strict requirements on data minimization, consent, breach notification, and the right to erasure, directly affecting HTTP cookie practices, DNS logging, IP address retention, and the collection of network telemetry data. Its extraterritorial scope made it the most influential data protection law in internet history.
TLS 1.3 Published as RFC 8446
The IETF published TLS 1.3 as RFC 8446 after nearly four years of standardization work, delivering a major security and performance overhaul of the Transport Layer Security protocol. TLS 1.3 removed support for weak cipher suites and RSA key exchange in favor of forward-secrecy-only key agreement, reduced the handshake from two round-trips to one, and introduced 0-RTT resumption for returning clients. The specification became the fastest-adopted major TLS revision in history, with browser and server support shipping within months of publication.
DNS over HTTPS (DoH) Launched in Firefox
Mozilla enabled DNS over HTTPS by default for US Firefox users, routing DNS queries through Cloudflare's encrypted HTTPS resolver instead of the operating system's default resolver. RFC 8484 had formally standardized DoH earlier in 2018, but Firefox's rollout was the first major browser deployment at scale, triggering debate about centralization, ISP bypass, and user privacy. DoH encrypts DNS traffic in the same TLS channel as web requests, preventing passive eavesdropping and manipulation of DNS responses by on-path observers.
2020s
TLS 1.0 and 1.1 Deprecated by Major Browsers
Microsoft, Google, Apple, and Mozilla coordinated browser releases in January 2020 that disabled TLS 1.0 and TLS 1.1 by default, requiring servers to support at least TLS 1.2 to establish secure connections with modern browsers. The deprecation removed protocols with known vulnerabilities such as BEAST, POODLE, and DROWN that had persisted in production systems for over two decades. The move accelerated a rapid industry migration to TLS 1.2 and 1.3, with TLS 1.0 and 1.1 subsequently formally deprecated by the IETF in RFC 8996.
COVID-19 Pandemic Drives Massive Internet Traffic Surge
Global lockdowns imposed in response to the COVID-19 pandemic caused internet traffic to surge by 20 to 40 percent within weeks as hundreds of millions of people shifted to remote work, online education, and video conferencing simultaneously. Network operators and CDN providers rapidly scaled capacity to accommodate the spike, stress-testing the resilience of BGP routing, DNS infrastructure, and last-mile access networks. The pandemic accelerated the transition to cloud services, VPN usage, and video streaming while exposing digital-divide inequalities in broadband access.
HTTP/3 Based on QUIC Gains Traction
HTTP/3, built on the QUIC transport protocol over UDP rather than TCP, moved toward IETF standardization in 2021 with broad browser support and deployment by Cloudflare, Google, and Facebook. QUIC eliminates TCP's head-of-line blocking at the transport layer and integrates TLS 1.3 natively, reducing connection establishment to a single round-trip for new connections and zero round-trips for session resumption. HTTP/3 and QUIC were formally standardized as RFC 9114 and RFC 9000 respectively in 2022, representing the most significant change to web transport since TCP was designed.
RPKI Adoption Exceeds 40% of Global Routes
By June 2022 the Resource Public Key Infrastructure (RPKI) framework for cryptographic validation of BGP route origins had been adopted for over 40% of globally routed prefixes, a milestone marking a turning point in the long effort to secure internet routing. RPKI uses Route Origin Authorizations stored in signed repositories to allow routers to reject BGP announcements with invalid origin ASNs, directly addressing route hijacking attacks. The adoption milestone was driven by mandates from major network operators and government agencies in the United States and Europe following high-profile BGP hijacking incidents.
NIST Post-Quantum Cryptography Standardization Advances
NIST released draft standards for post-quantum cryptographic algorithms including CRYSTALS-Kyber for key encapsulation and CRYSTALS-Dilithium for digital signatures, advancing the multi-year effort to replace RSA and elliptic-curve cryptography before large-scale quantum computers render them insecure. The looming threat of harvest-now-decrypt-later attacks, where adversaries collect encrypted internet traffic today to decrypt it once quantum hardware matures, gave urgency to the transition. Browser vendors and TLS library maintainers began integrating hybrid post-quantum key exchange mechanisms into TLS 1.3 implementations.
Global IPv6 Adoption Exceeds 45% of Internet Traffic
By early 2025, Google's measurement of IPv6-capable users reaching its services crossed the 45% threshold globally, representing a dramatic increase from under 1% in 2012. Major contributing factors included mandatory IPv6 support in mobile networks in the United States, India, and Western Europe, as well as ISP deployments of dual-stack and IPv6-only with NAT64 architectures. Despite the milestone, significant portions of enterprise networks and legacy ISP infrastructure remained IPv4-only, illustrating the long tail of one of the internet's largest protocol transitions.