Articles

A TLS certificate warning means the browser could not validate a protected connection to the site in the address bar under its security rules. The causes differ: a wrong name, invalid dates, an untrusted chain or something unusual on the network. Read the exact error before acting.

Traceroute is a diagnostic view of the possible path packets take towards a destination. It lists responding hops and the time taken for probe responses. A trace is a snapshot under particular network conditions, not a permanent map of the Internet or proof of where every application packet travels.

Upload and download speeds in Mbps are only part of the picture. Throughput, latency, jitter and packet loss describe different properties, while Wi-Fi, Ethernet, competing devices, VPNs, routing and the test server all affect results. High throughput can coexist with poor latency under load.

A URL, hostname, domain and path describe an application-layer request; distinguish network reachability from the web-server response. DNS can resolve, TCP/TLS can connect, and HTTP can still return a redirect or error. Status code, Location, hostname, path and URL scheme describe different parts of the transaction.

When comparing a VPN and a proxy, choose the property you need: confidentiality, integrity, authentication or reduced correlation. Different mechanisms solve different problems: encryption is not hashing, a VPN is not the same as an application proxy, and changing a visible identifier does not create complete anonymity.

WebRTC uses ICE to discover candidate paths for real-time communication. Modern browsers apply privacy controls to local addresses, but observed candidates can still reveal useful network information depending on browser, VPN and configuration.

WebSocket creates a long-lived two-way connection after an HTTP-based opening handshake. It suits chat, notifications and real-time data, but proxies, load balancers and network timeouts can still terminate the session.

Nameservers host a DNS zone and provide authoritative answers for it. Delegation tells the DNS hierarchy where to direct queries for a domain. The nameserver setting at a registrar and the NS records inside the zone are related but not identical control points.

RIPE NCC is the Regional Internet Registry serving Europe, the Middle East and parts of Central Asia. It distributes and registers Internet number resources, including IP address space and autonomous system numbers (ASNs), under the policies applicable to its region. It also maintains a database of registration and contact information used by network operators.

To understand a default gateway, look at how a host identifies its local network, neighbours and route to other networks. IPv4 depends on the address, prefix length and gateway; IPv6 also depends on address scope and Neighbor Discovery. One wrong value can leave local communication working while breaking access beyond the subnet.

A domain name is a human-readable name in the DNS hierarchy, such as example.org. It can be used for websites, email and other services, but buying a domain does not automatically create any of them. The name is registered under a top-level domain according to that registry’s rules and then configured through DNS.

A firewall allows or blocks network traffic according to rules. It can run on a computer, a home router or at a cloud network boundary. Rules control access to connections; they do not automatically make an allowed application secure.

A hosting provider supplies computing resources and network connectivity for a website, application or related service. Depending on the plan, it may also manage the operating system, databases, email, backups and technical support. A domain registration is a separate service, even when the same company sells both. The right plan depends on traffic, control needs and maintenance capacity.

A MAC address is an identifier used by a network interface at the link layer. Ethernet and Wi-Fi commonly use 48-bit addresses, usually displayed as six pairs of hexadecimal digits. The address helps devices exchange frames on a local network. It is different from an IP address, which supports communication across networks.

A network port is a number used by transport protocols such as TCP and UDP to direct traffic to the right service. Together, a protocol, IP address and port form a practical endpoint for a connection. A port is a logical identifier, not a physical socket on a router.

A proxy server receives a request from one party and passes it toward another server. A forward proxy acts on behalf of a client, while a reverse proxy stands in front of one or more application servers. Proxies can filter requests, cache responses, manage access or distribute load. Their benefits depend on configuration and the trust placed in the operator.

A subdomain is a name within a wider domain hierarchy. In blog.example.org, blog sits under example.org. Subdomains can separate a website, mail, an API and other services, but the name alone creates no web page. You still need DNS records and a server configured to accept it.

A userbar is a small graphic placed in a forum or community profile signature. These narrow banners were especially popular in the 2000s for showing interests, affiliations or a link to a site. Today they are mainly a historical web format, although some communities still allow them.

A web service is an interface through which applications exchange data or invoke functions over a network. A website is designed primarily for people to read and use; a web service exposes a contract intended for software clients. The same product can provide both. Many services use HTTP and JSON, but the term includes other protocols and data formats.

A website is a collection of web resources presented under one or more addresses, usually with related pages and a common purpose. A domain name, a hosting server and a web page are related parts, but they are not interchangeable. Understanding the difference helps when publishing or troubleshooting a site.

An autonomous system, or AS, is a group of IP networks operated under a coherent external routing policy. It is identified by an autonomous system number, or ASN. Network operators use BGP to announce reachable IP prefixes and exchange routing information with other networks. An ASN identifies a routing participant, not a person or a physical server.

An email address identifies a mailbox or routing destination, usually in the form local-part@domain. The part before the at sign is interpreted by the mail provider; the domain after it is resolved through DNS. An address can be valid in form yet fail to receive mail if its domain or mailbox is not configured.

An IP address identifies an interface on an IP network so packets can be delivered to a destination. It is a network address, not a permanent identity for a person or even a particular device. A computer can have several addresses at once, and an address can change when the connection changes.

Antivirus software helps detect, block and remove malicious programs. Modern security products often combine file scanning, behaviour monitoring, web protection and operating-system safeguards. They reduce risk but cannot guarantee that every new or targeted attack will be stopped. Protection also depends on timely updates and the choices made by the device owner.

Carrier-grade NAT (CGNAT) is IPv4 address translation performed inside an Internet provider’s network. It lets multiple subscribers share one public IPv4 address. Outgoing connections often work normally, but incoming access to a server at home may be unavailable without a provider-supported arrangement.