Seems odd that there isn't an obvious solution. What's to prevent anyone from just sending a 20GB file or something?