[forrestthewoods]

Can we just consider XML itself an unsolvable vulnerability and call it day?

[lyxsus]

What do you suggest to use instead? It's a bit too early to use RDF, people haven't catch up yet.

[tptacek]

There is no good reason that the thing that 98% of people use SAML to do should involve XML.