• From: "Len" <cbullard@h...>
• To: "'Michael Kay'" <mike@s...>, "'Costello, Roger L.'" <costello@m...>, <xml-dev@l...>
• Date: Sat, 12 Apr 2008 10:04:45 -0500

Correct.

The reason to monitor the network traffic is to interpret content.

XML makes that easier and more reliable.

len


From: Michael Kay [mailto:mike@s...] 
 
Well, terrorists can blow up an aeroplane by sending the SMS message "Hello
world" to a suitably configured mobile phone. All data is executable code,
given a suitable interpreter. Anyone who thinks they can achieve security by
monitoring the data sent over a network (e.g. by prohibiting attachments
with the file extension .ZIP or .XML) is either extremely naive, or
pragmatic enough to know that it's only a very small part of the solution.

• References:
  • RE: XML is Mobile Code? [was: Defining an XML vocabulary: specify syntax, semantics, and BEHAVIOR?]
    • From: "Michael Kay" <mike@s...>