Glossary

Short, plain-English definitions of the networking terms you'll run into.

A

  • A recordA DNS record that maps a hostname to an IPv4 address.
  • AAAA recordA DNS record that maps a hostname to an IPv6 address.
  • AEOAnswer Engine Optimization — making content easy for LLMs to cite.
  • AI bot opt-outRobots.txt directive blocking AI training crawlers.
  • ALPNApplication-Layer Protocol Negotiation — TLS extension that picks HTTP/1 vs 2 vs 3.
  • AnycastIP routing trick where the same IP exists at many physical locations.
  • ASNAutonomous System Number — identifies the network operator that owns an IP range.
  • Autonomous SystemAn independent network with a unique ASN.

B

  • BGPBorder Gateway Protocol — the routing protocol between Autonomous Systems.

C

  • CAA recordTells CAs which authorities are allowed to issue certs for this domain.
  • Certificate TransparencyPublic append-only log of every TLS cert issued by a participating CA.
  • CGNATCarrier-Grade NAT — ISPs share one public IP across many subscribers.
  • CIDRClassless Inter-Domain Routing — IP ranges as prefix-length notation.
  • CNAMEA DNS record that aliases one hostname to another.
  • CNAME flatteningA nameserver feature that returns A records at the root despite CNAME being configured.
  • CORSCross-Origin Resource Sharing — browser policy that gates cross-domain fetches.
  • CRLCertificate Revocation List — public list of revoked certs from a CA.
  • CSPContent-Security-Policy — HTTP header that restricts which scripts/styles a page can load.
  • CT logCertificate Transparency log — public append-only record of every TLS cert issued.

D

  • DKIMDomainKeys Identified Mail — cryptographic signature proving the message wasn't tampered with.
  • DMARCPolicy record that tells receivers what to do when SPF or DKIM fails.
  • DNS PropagationThe time for DNS changes to expire from caches worldwide.

F

  • FCrDNSForward-Confirmed reverse DNS — the IP→hostname→IP round-trip must match.

H

  • HSTSStrict-Transport-Security — tells browsers to only ever talk to this host over HTTPS.
  • HTTP/2Binary, multiplexed evolution of HTTP/1.1 — required for modern web performance.
  • HTTP/3HTTP over QUIC — TCP-less transport with built-in TLS and 0-RTT.

J

  • JSON-LDJSON for Linked Data — the modern way to embed Schema.org in HTML.

L

  • llms-full.txtFull-content variant of llms.txt — every page's content concatenated for LLM ingestion.
  • llms.txtProposed standard listing the AI-readable resources on a site.

M

  • MIME typeContent-type identifier (e.g. text/html) sent in an HTTP response.
  • MX recordA DNS record that tells the world where to deliver email for a domain.

N

  • NS recordNames the authoritative nameservers for a domain.

O

  • OCSP staplingTLS handshake optimization where the server attaches a fresh revocation proof.

P

  • PTR recordReverse-DNS record mapping an IP back to a hostname.

Q

  • QUICGoogle-originated UDP-based transport protocol; HTTP/3's carrier.

R

  • RBLRealtime Blackhole List — a DNS-based list of IPs known for spam/abuse.
  • RegistrarA company accredited to sell domain registrations.

S

  • Schema.orgStructured-data vocabulary embedded in HTML so machines can parse pages.
  • SNIServer Name Indication — TLS extension that tells the server which hostname is requested.
  • SOA recordStart-Of-Authority — primary nameserver + admin email + zone timers.
  • SPFSender Policy Framework — lists which mail servers are allowed to send for a domain.
  • SRV recordService-location record naming a hostname + port for a specific service.
  • SubdomainA DNS name that's a child of another domain.

T

  • TLSTransport Layer Security — encrypts traffic between client and server.
  • TLS 1.3The current TLS version — faster handshake, dropped weak ciphers.
  • TTLTime-to-Live — how long a DNS record stays cached.
  • TXT recordA DNS record that carries arbitrary text — used for SPF, DMARC, and domain verification.

W

  • WebhookAn HTTP POST sent automatically when an event happens.
  • WHOISPublic registry data for a domain — registrar, creation date, expiry, name servers.
  • WHOIS serverThe TLD-specific server that returns registration data for a domain.

X

  • X-Frame-OptionsHTTP header that controls whether a page can be loaded in an iframe.