5.1 Security Considerations for Implementers

In order to avoid denial-of-service attacks, the server cannot wait indefinitely for the PDU content to arrive. Instead, the server will disconnect the client if the timer that is specified in sections 3.1.2 and 3.2.2 has passed and the entire PDU was not received.