Re: [openssl-users] Question about TLS record length limitations

2015-12-08 Thread Software Engineer 979
Ben, I'm pretty new to TLS, so please bear with me. I was thinking through what you said and I had a few questions. Couldn't you pull off the same DOS attack using the existing 16K message size today. The scale of the DOS attack would have to be larger as the packet size is smaller, but the vector

Re: [openssl-users] Question about TLS record length limitations

2015-12-07 Thread Benjamin Kaduk
On 12/07/2015 02:43 PM, Software Engineer 979 wrote: > Hello, > > I'm currently developing an data transfer application using OpenSSL. > The application is required to securely transfer large amounts of data > over a low latency/high bandwidth network. The data being transferred > lives in a 3rd pa

Re: [openssl-users] Question about TLS record length limitations

2015-12-07 Thread Salz, Rich
I suggest you ask on the TLS mailing list, t...@ietf.org /r$ -- Senior Architect, Akamai Technologies IM: richs...@jabber.at Twitter: RichSalz ___ openssl-users mailing list To unsubscribe: https://mta.openssl.org/mai

[openssl-users] Question about TLS record length limitations

2015-12-07 Thread Software Engineer 979
Hello, I'm currently developing an data transfer application using OpenSSL. The application is required to securely transfer large amounts of data over a low latency/high bandwidth network. The data being transferred lives in a 3rd part application that uses 1 MB buffer to transfer data to my appl