Note that greenlets make thread flooding more difficult.

diff --git a/security.txt b/security.txt
index d920a12666fb55c73650cf3fc8929a4edc5f5e1b..3cfe63d6d5c72190aba50ed7be41e24bd7c6668d 100644 (file)
--- a/security.txt
+++ b/security.txt
@@ -163,6 +163,10 @@ near resource limits.  An ordinary DoS attack would then be prevented
 from completely blocking all message traffic; the cost would be a
 whole lot of join/leave spam due to connection churn.
 
+We also use greenlets (Python coroutines imitating system threads)
+when they are available.  This reduces memory overhead due to
+threading substantially, making a thread-flooding DoS more dfficult.
+
 == Authentication/Integrity ==
 
 One way to help prevent DoS attacks would be in-band authentication -