crypto/tls: maxHandshake is not documented

[zhangyoufu]

crypto/tls has a hard-coded limitation const maxHandshake = 65536 for handshake message length.

While a ClientHello message could has a maximum length of 131396 under extreme conditions, according to OpenSSL source code.

The 64KiB limitation is good at security perspective, to reduce server resource consumption. But I think it should be documented, as a Go specific behavior.

[dmitshur]

/cc @FiloSottile

[FiloSottile]

Documenting something makes it a backwards compatibility promise, while this should be just an internal detail. What we do have is a clear error for when the limit is exceeded, so if it starts happening users can open an issue about it.

go/src/crypto/tls/conn.go

Line 982 in 0fb95e7

return nil, c.in.setErrorLocked(fmt.Errorf("tls: handshake message of length %d bytes exceeds maximum of %d bytes", n, maxHandshake))

(If you opened this issue because you hit the limit and you think we should increase it, feel free to open an issue for that.)