sanity size check on handshake headers