There is not a large opportunity for attackers to attempt attacks on XML traffic, said Jason Bloomberg, president of McLean, Va.-based ZapThink, a Dovel Technologies Company. Most organizations that accept XML traffic from outside their network put XML firewalls in place. While XML is used widely across the Web, XML encryption is in limited use, because it is processor intensive.

“Instead of having to rely on a protocol that decrypts and encrypts XML other approaches give organizations fine grained control for security within the message,” Bloomberg said.

Read the entire article at http://searchsecurity.techtarget.com/news/2240102554/Researchers-break-WC3-XML-encryption-algorithm-push-for-new-standard.