Re: [TLS] TLS Record Size Limitation

2015-12-09 Thread Software Engineer 979
Thanks for replies everyone. I also posted the same question the OpenSSL mailing list. One interesting response stated that the size was limited to prevent DOS attacks due to resource exhaustion (in the case that data was being injected). "The peer is required to buffer the entire record before pr

Re: [TLS] TLS Record Size Limitation

2015-12-09 Thread Martin Rex
Software Engineer 979 wrote: > > I'm currently developing an data transfer application using OpenSSL. The > application is required to securely transfer large amounts of data over a > low latency/high bandwidth network. The data being transferred lives in a > 3rd part application that uses 1 MB bu

Re: [TLS] TLS Record Size Limitation

2015-12-08 Thread Yngve N. Pettersen
On Tue, 08 Dec 2015 11:11:52 +0100, Peter Gutmann wrote: Dave Garrett writes: A TLS extension to negotiate max length might be viable. I think a better starting point would be to look at the implementation that's causing the problem. There's nothing magical about a 16K max segment s

Re: [TLS] TLS Record Size Limitation

2015-12-08 Thread Peter Gutmann
Dave Garrett writes: >A TLS extension to negotiate max length might be viable. I think a better starting point would be to look at the implementation that's causing the problem. There's nothing magical about a 16K max segment size that causes poor performance, TCP typically has an MSS of 1400-1

Re: [TLS] TLS Record Size Limitation

2015-12-08 Thread Yoav Nir
> On 7 Dec 2015, at 11:00 PM, Software Engineer 979 > wrote: > > >> Hello, >> >> I'm currently developing an data transfer application using OpenSSL. The >> application is required to securely transfer large amounts of data over a >> low latency/high bandwidth network. The data being transf

Re: [TLS] TLS Record Size Limitation

2015-12-08 Thread Dave Garrett
On Monday, December 07, 2015 04:00:54 pm Software Engineer 979 wrote: > Hello, > > I'm currently developing an data transfer application using OpenSSL. The > application is required to securely transfer large amounts of data over a > low latency/high bandwidth network. The data being transferred l

[TLS] TLS Record Size Limitation

2015-12-07 Thread Software Engineer 979
Hello, I'm currently developing an data transfer application using OpenSSL. The application is required to securely transfer large amounts of data over a low latency/high bandwidth network. The data being transferred lives in a 3rd part application that uses 1 MB buffer to transfer data to my appl