A DDoS attack can be launched with a large number of legitimate requests or simply sending garbage to overwhelm the server capacity. In 2018, a 1.3Tbps DDoS attack was launched on GitHub for a duration of about 15-20 minutes. The motive of attackers in cases like this is to simply overwhelm the servers and more often than not, they don't care about sending *legitimate* requests. From the architecture perspective, you need to be prepared for the worse. So, we concluded that while transaction fees may *theoretically* combat spam, a determined attacker may not even care about sending real transactions to the network. So, a better defense mechanism must be built anyways, so why even pretend that transaction fees eliminate spam? In addition, micro transactions are possible on the Storecoin network, so it is possible that the network experiences an influx of large number of requests from time to time. We call this legal spam because the *traffic pattern* is that of spam, but the transactions are all legal. We have captured our research on DDoS and spam protection here.

- Storecoindev.