Your IPv4 address:
Operating system:

IPv6 privacy addresses: why they change

A temporary IPv6 address is an additional device address used for outgoing connections. It changes over time so that one fixed device identifier is harder to correlate across visits. The mechanism does not make a person anonymous or necessarily change the address prefix assigned to their network.

Read more

JSON vs XML APIs

The choice between JSON and XML sits within the contract between a client and an API. A client should distinguish success, validation errors, authentication failures, rate limits and temporary server errors. JSON versus XML does not change HTTP semantics, and IPv4/IPv6 values must be preserved without IPv4-length assumptions.

Read more

Latency, jitter and packet loss: what each measure means

A fast download result does not guarantee a smooth call or game. Interactive traffic also depends on latency, changes in latency known as jitter, and packet loss. Each describes a different aspect of the connection, so measure them separately before changing equipment or blaming a server.

Read more

Linux chmod permissions explained

An exact rule, unit or bit representation explains chmod permissions in Linux more clearly than generic network troubleshooting. Before calculating, identify what is measured, the input units, and the expected output format.

Read more

MAC address randomization

Randomization changes the MAC address of a network interface, the identifier used on a local Ethernet or Wi-Fi link. A device MAC address is not carried across the Internet as a permanent global identifier: routers use link-layer addresses appropriate to each local segment.

Read more

Mbps vs MB/s: convert internet speeds correctly

Internet access rates are usually advertised in megabits per second, written Mbps or Mb/s. File sizes and download programs often use megabytes and MB/s. A byte contains eight bits, so the numbers differ by a factor of about eight even before protocol overhead is considered.

Read more

NXDOMAIN, SERVFAIL and REFUSED

Read DNS errors such as NXDOMAIN, SERVFAIL and REFUSED along the stub resolver → recursive resolver → delegation → authoritative nameserver path. A recursive resolver can answer from cache, so a user response is not necessarily fetched directly from the authoritative server. TTL, record type and response code explain where the result came from and how long it can remain usable.

Read more

Open, closed and filtered ports: interpreting a test

A port check reports how one connection attempt appeared from one network location. “Open”, “closed” and “filtered” are useful diagnostic labels, but a single result cannot identify every device involved or determine whether an application is secure.

Read more

Password entropy and length

Assess password entropy and length against a specific property: confidentiality, integrity, authentication or reduced correlation. Different mechanisms solve different problems: encryption is not hashing, a VPN is not the same as an application proxy, and changing a visible identifier does not create complete anonymity.

Read more

Ping explained: latency, packet loss and ICMP

Ping checks whether a destination responds to network probes and measures the time until each answer returns. It is a useful first diagnostic step, but it does not measure download bandwidth and cannot by itself establish that an application or website is healthy.

Read more

Ping spikes and unstable latency

Ping spikes and unstable latency cannot be assessed from a single Mbps number. Throughput, latency, jitter and packet loss describe different properties, while Wi-Fi, Ethernet, competing devices, VPNs, routing and the test server all affect results. High throughput can coexist with poor latency under load.

Read more

Provider-independent IP addresses: PI versus PA

Provider-independent (PI) address space is registered independently of any single upstream Internet provider. A holder can normally retain it when changing providers, subject to registry policy and routing arrangements. PI does not automatically make a service reachable worldwide: network operators must accept and carry the route to the prefix.

Read more

Public vs private IP addresses: what is the difference?

A public IP address is used for communication across the Internet and must be unique within the public routing space. A private IPv4 address is intended for a local network: the same address, such as 192.168.1.10, can be used in different homes at the same time. To understand an address shown in settings, distinguish the device, router and provider.

Read more

Punycode and internationalised domain names explained

Punycode is an encoding used to represent Unicode characters in an ASCII-compatible form for internationalised domain names. A domain written with national characters may therefore appear in technical data as a label beginning xn--. The encoding changes representation; it does not establish that a website is genuine.

Read more

Punycode and internationalized domains

For Punycode and internationalised domains, identify the property you are checking: confidentiality, integrity, authentication or reduced correlation. Different mechanisms solve different problems: encryption is not hashing, a VPN is not the same as an application proxy, and changing a visible identifier does not create complete anonymity.

Read more

RDAP: the modern replacement for WHOIS

WHOIS traditionally uses TCP port 43 and does not define one universal response format. RDAP is an HTTP API with JSON representations, status codes, links and service discovery. For generic top-level domains, ICANN moved to RDAP as the definitive registration-data service on 28 January 2025; country-code domains can follow different policies.

Read more

Shared hosting, VPS and dedicated servers

An advertised maximum speed or plan name is not enough to compare shared hosting, VPS and dedicated servers. Access technology, resources, isolation, routing, peering/transit, address policy and support all matter. Two services with similar headline specifications can behave differently under load.

Read more

SPF, DKIM and DMARC: how email authentication works

SPF authorises sending hosts for an envelope domain, DKIM signs selected message content with a domain key, and DMARC evaluates identifier alignment and publishes policy/reporting information. Passing one mechanism does not prove that a message is trustworthy.

Read more

Static vs dynamic IP addresses: which do you need?

A static IP address is deliberately kept fixed for an interface or service. A dynamic address is assigned automatically and may change, but it need not change every time a device reconnects. These terms describe how an address is assigned, not whether it is public or private: either scope can use either assignment method.

Read more

Subnet masks and CIDR notation

Subnet masks and CIDR notation describe how a host identifies its local network, neighbours and route to other networks. IPv4 depends on the address, prefix length and gateway; IPv6 also depends on address scope and Neighbor Discovery. One wrong value can leave local communication working while breaking access beyond the subnet.

Read more

TCP vs UDP: transport differences and practical examples

TCP and UDP carry application data over IP, but provide different services. TCP gives applications an ordered byte stream with acknowledgements and retransmission. UDP sends individual datagrams without those transport-level guarantees. Neither choice is automatically better: the application’s requirements decide.

Read more

Temporary email: uses and limits

Check temporary email step by step: recipient domain, MX/DNS, SMTP connection, server response, authentication policy and later filtering. An SMTP acceptance does not guarantee Inbox placement, and the absence of an immediate bounce does not prove long-term mailbox availability.

Read more

Temporary email: when is a disposable address useful?

A temporary email service provides an address that receives messages for a limited period or until its mailbox is removed. It can keep a one-off registration separate from your main inbox. The address does not make you anonymous, and losing access to it can also mean losing access to the account created with it.

Read more

TLS 1.3: how the secure handshake works

A TLS 1.3 handshake negotiates cryptographic parameters, performs key agreement and authenticates the server with a certificate before application data is protected. Session resumption can reduce later setup work but does not remove certificate and identity considerations.

Read more