For unauthenticated clients the output buffer is limited to prevent them from abusing it by not reading the replies