From d0760c918ab75c837548ca27f19a46d387f77004 Mon Sep 17 00:00:00 2001 From: tv Date: Fri, 6 Nov 2026 04:31:04 +0100 Subject: strangers messages small --- docs/trust.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'docs/trust.md') diff --git a/docs/trust.md b/docs/trust.md index 165fc9b..4435f99 100644 --- a/docs/trust.md +++ b/docs/trust.md @@ -99,7 +99,12 @@ peers' and warns when its own is off (`--clock-skew-warn`; [`measurements.md`](m Send messages. Before it proves the swarm key, a node ignores everything from it but the handshake, and doesn't sync with it. A stranger can still cost a node the work of -reading and dropping its messages. +reading and dropping its messages, but no more than 256 KiB of each: a node that hasn't +proved itself a member (its HELLO, or HELLO_REPLY, with the key) can only usefully send +a handshake, WHO or ME, or PING or PONG, and libp2p and Tor refuse a larger frame from +it before reading it, by the length it announces (`transport::Admission`). Mycelium's +daemon has taken a message whole before the node sees it; a stranger's larger one is +dropped undecoded. A member's messages may be large (a sync message up to 64 MiB). ## What protects against mistakes -- cgit v1.3.1