strangers messages small

1 files changed, 6 insertions, 1 deletions

diff --git a/docs/trust.md b/docs/trust.md
index 165fc9b..4435f99 100644
--- a/docs/trust.md
+++ b/docs/trust.md
@@ -99,7 +99,12 @@ peers' and warns when its own is off (`--clock-skew-warn`; [`measurements.md`](m
 
 Send messages. Before it proves the swarm key, a node ignores everything from it but
 the handshake, and doesn't sync with it. A stranger can still cost a node the work of
-reading and dropping its messages.
+reading and dropping its messages, but no more than 256 KiB of each: a node that hasn't
+proved itself a member (its HELLO, or HELLO_REPLY, with the key) can only usefully send
+a handshake, WHO or ME, or PING or PONG, and libp2p and Tor refuse a larger frame from
+it before reading it, by the length it announces (`transport::Admission`). Mycelium's
+daemon has taken a message whole before the node sees it; a stranger's larger one is
+dropped undecoded. A member's messages may be large (a sync message up to 64 MiB).
 
 ## What protects against mistakes