rekor
rekor copied to clipboard
Add bounds on number of elements in api/v1/log/entries/retrieve.
The API definition for retrieve does not specify an upper bound for number of entries in the request. It is trivial to construct a request that takes O(many seconds) to return with a response size O(MB). Adding upper bounds on number of entries per request will let us offer an achievable SLO for this endpoint.