mirror of
https://github.com/permissionlesstech/bitchat-android.git
synced 2026-10-25 07:40:36 +00:00
2d80548ddb
AGENTS.md requires protocol and security changes to update the relevant specification. sync.md already carries the receiver-side DoS rules — the filter-length cap and the malformed-payload rejections — but says nothing about how often a request may be serviced or how much it may pull, which is the gap this branch closes in the Android client. Record it where the other receiver limits live, including why the budget cannot be keyed on the sender ID: REQUEST_SYNC carries no signature that receivers verify, so that field is free to rotate. Other implementations need some equivalent even if they pick different numbers.