RSS is growing at a lightening speed. What was once only known as a "techie tool", RSS is becoming a tool that is continuously being employed by the overall population. Along with the nice comes, the not thus good. And while some have mentioned the emergence of RSS spam, where content publishers dynamically generate nonsensical feeds stuffed with keywords, the important concern relates to security. Whereas an annoyance to the search engines, spam in RSS feeds pales in comparison to the attainable security considerations that would be in RSS' future.
Security Implications Connected to RSS.
As RSS gains momentum security fears loom large. As publishers are quickly finding innovative uses for RSS feeds, hackers are taking notice. The power and extendibility of RSS in its simplest type is additionally its achilles heel. The enlargement capabilities of the RSS specification, specifically the "enclosure" field that has launched the podcasting phenomenon, is where the vulnerabilities lie. The enclosure field in itself isn't the problem, in fact the majority of RSS feeds do not even use the enclosure tag. The enclosure tag is basically used to link to file sorts, things like images, word documents, mp3 files, power point shows, and executables and will be thought of in similar terms to email attachments.
The actual fact that RSS will be used to distribute these file varieties has opened a myriad of doors to users of the syndication customary, however conjointly has created cause for concern. Most folks don't feel that the risk is important as a result of folks "select" the content that they receive, and while it may make the distribution of malware, viruses and spy applications via RSS less prevalent, their continues to be the inherent risk of a infected file being distributed.
The problem is one among each technology and lack of education.
The danger lies in the very fact that several RSS readers, news aggregators, or pod-catchers automatically download the information contained in the enclosure field irrespective of its file type or source.
Most RSS developers acknowledge the risks associated with the enclosure field, but few have had the forethought to include filtering, screening or authentication capabilities and several automatically download enclosures.
Nick Bradbury of Bradsoft/NewsGator seems to be proactive, designing FeedDemon with security in mind. FeedDemon uses an editable safelist of file types as well as permitting users to observe what files are automatically downloaded. FeedDemon conjointly contains arduous-coded warnings related to specific file types.
Developers of ByteScout took a different approach to the handling of enclosure files, ByteScout will not automatically download something without user intervention for each download.
Sadly, not all RSS readers, aggregators and podcatchers contemplate the doable security implications associated with RSS feeds and podcasts, some can automatically download enclosures while not warning or any thoughts of security. Be sure to examine how your RSS reader handles files contained within the enclosure field of an RSS feed.
With the increased use of RSS and podcasting, the safety risks increase with it. Their is cause for concern, however proactive users and conscientious developers will simply subvert the danger by taking precautions seriously. Computer viruses and malware are cause for legitimate concern, there is ample time and action which will avert potential problems.
Author Resource:
Lic Robertson has been writing articles online for nearly 2 years now. Not only does this author specialize in RSS, you can also check out latest website about
![[Valid RSS feed]](http://www.look4articles.com/images/icon_Rss.png "XML Feed For RSS"){kind=icon}
Category Rss Feed
Print This Article
Add To Favorites
![[Valid RSS feed]](http://www.look4articles.com/images/rss.jpg "XML Feed For RSS")