diff options
Diffstat (limited to 'docs/trust.md')
| -rw-r--r-- | docs/trust.md | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/docs/trust.md b/docs/trust.md index 165fc9b..4435f99 100644 --- a/docs/trust.md +++ b/docs/trust.md @@ -99,7 +99,12 @@ peers' and warns when its own is off (`--clock-skew-warn`; [`measurements.md`](m Send messages. Before it proves the swarm key, a node ignores everything from it but the handshake, and doesn't sync with it. A stranger can still cost a node the work of -reading and dropping its messages. +reading and dropping its messages, but no more than 256 KiB of each: a node that hasn't +proved itself a member (its HELLO, or HELLO_REPLY, with the key) can only usefully send +a handshake, WHO or ME, or PING or PONG, and libp2p and Tor refuse a larger frame from +it before reading it, by the length it announces (`transport::Admission`). Mycelium's +daemon has taken a message whole before the node sees it; a stranger's larger one is +dropped undecoded. A member's messages may be large (a sync message up to 64 MiB). ## What protects against mistakes |