reject small CHLOs to prevent amplification attacks

fixes #1
2016-05-19 16:20:22 +02:00
parent c748a8dfc0
commit f86875f746
3 changed files with 17 additions and 2 deletions
--- a/protocol/protocol.go
+++ b/protocol/protocol.go
@@ -54,3 +54,6 @@ const DefaultRetransmissionTime = 500 * time.Millisecond

 // MinRetransmissionTime is the minimum RTO time
 const MinRetransmissionTime = 200 * time.Millisecond
+
+// ClientHelloMinimumSize is the minimum size the server expectes an inchoate CHLO to have.
+const ClientHelloMinimumSize = 1024