Jon Postel: The God of the Internet

Abstract

For nearly thirty years, the internet’s most critical infrastructure was one bearded man in sandals at USC who kept the lists. Jon Postel (1943–1998) edited every RFC from 1969 until his death, ran IANA (deciding who got IP addresses, protocol numbers, ports, and ultimately the DNS root) and co-defined IP, ICMP, TCP, and SMTP. He wrote the internet’s most quoted engineering maxim, the robustness principle: be conservative in what you send, be liberal in what you accept. He held no elected office and signed no contracts of authority; the internet obeyed him because everyone trusted him, an arrangement so improbable that The Economist concluded: “If the Net does have a god, he is probably Jon Postel.” In January 1998 he demonstrated (with one email that redirected most of the DNS root) exactly how much power that trust represented, and governments decided the benevolent-dictator era had to end. ICANN was incorporated that autumn. Postel died sixteen days later.

Jon Postel. Image: Carl Malamud, CC BY 2.0, via Wikimedia Commons.

Van Nuys High’s Third Founder

Postel (born August 6, 1943, Altadena, California) attended Van Nuys High School, improbably, alongside both Vint Cerf and Steve Crocker, making one Los Angeles high school the alma mater of three founding fathers of the internet. At UCLA (B.S. 1966, M.S. 1968, Ph.D. 1974 under Dave Farber) he joined the ARPANET effort at Boelter Hall (node #1) weeks after the first “LO” was sent from that building (see ARPANET: Building the Network), working in the Network Measurement Center as the network grew from two nodes into a system that needed, above all, record-keeping.

That became his life. When Steve Crocker started the Request for Comments series in 1969, Postel became its editor, and stayed editor of every RFC for twenty-nine years, shaping the plain-spoken, humble-by-design document culture in which the internet’s entire architecture was and is still specified (see The Open Standards Process). From 1977 he worked at USC’s Information Sciences Institute, which became the institutional shell around what was really a personal role.

The Keeper of the Lists

Somebody had to assign the numbers, which protocol is 6, which port is 25, who gets which address block. Postel simply did it, reliably, for decades; the function was eventually named the Internet Assigned Numbers Authority (IANA), which for most of its existence was, in Cerf’s words, essentially Jon. His name is on the internet’s constitutional documents: RFC 791 (IP), 792 (ICMP), 793 (TCP), 821 (SMTP), and the foundational DNS RFCs, including RFC 1591, in which he set the policy for country-code domains with characteristic minimalism, find one responsible person per country, write it down.

His deepest imprint is a sentence. The robustness principle: “be conservative in what you do, be liberal in what you accept from others” (TCP specification, RFC 793, 1981), became Postel’s Law, the design ethic that let thousands of independently written, subtly incompatible implementations interoperate into one network. It has since acquired a famous security critique (tolerant parsers accumulate exploitable ambiguity; see Secure by Design), which is itself a measure of how thoroughly the principle built the world the critics live in.

January 28, 1998: The Root Demonstration

The internet’s growth made one-man stewardship geopolitically intolerable, billions in commerce hanging on lists maintained by a researcher answerable, contractually, to nobody in particular, while the US government moved to formalize control of the DNS root. Postel’s response was the most elegant power demonstration in internet history: on January 28, 1998, he emailed the operators of the root name servers, and eight of the twelve repointed their servers from the government-contracted root to IANA’s, because Jon asked. He called it a test. The White House’s Ira Magaziner reportedly threatened he’d “never work on the Internet again”; Postel reversed it within days. No outage, no headlines at the time, just proof that the root followed the man, not the contract. The governance scramble it accelerated produced ICANN, incorporated on September 30, 1998, with Postel slated as its first Chief Technology Officer.

He never served a day. Postel died on October 16, 1998, at 55, of complications from heart-valve surgery (sixteen days after ICANN’s incorporation. Cerf’s obituary was published, fittingly, as an RFC) RFC 2468, “I Remember IANA”: “He was our rock.” The Internet Society’s Jonathan B. Postel Service Award was created the following year, in 1999 (first recipient: Postel, posthumously); he entered the Internet Hall of Fame in 2012.

⚠️ Dead End: The Benevolent Dictator

Postel’s death closed the internet’s most instructive governance experiment: critical global infrastructure run by personal trust. It worked (arguably better than what replaced it) for reasons that could not scale or transfer: one incorruptible, technically supreme, universally known steward, formed inside a small research community where reputation was the only currency. The model has no succession mechanism; that is the whole flaw. What replaced it (ICANN’s multi-stakeholder bureaucracy, the IANA functions finally transitioned out of US government contract in 2016) is slower, more political, endlessly criticized, and survivable: it does not die of heart surgery. The same arc repeats across computing wherever a founder-run commons institutionalizes (Linux’s “benevolent dictator for life” being the longest-running counterexample still in production; see Linus Torvalds and Linux). The 1998 root incident is the case study: a system whose security model is one good man is one bad day from crisis, even when (especially when) the man is good.

Fun Fact

The Internet Society created its highest service honor, the Jonathan B. Postel Service Award, in 1999, and gave the first one to Postel himself, posthumously. He is thus the only person in internet history to be both an award’s namesake and its inaugural recipient. The IANA function he performed essentially part-time, with a filing cabinet’s worth of lists, is now run by a dedicated organization under global multi-stakeholder oversight.