Comment by mattstreet

Basically don't offer hackers any data amplification attacks, never respond with more data than it took for the attack to make the request.