<div>
:sheila54603,<br />
<br />
The Extensible Markup Language (XML) is a W3C-recommended general-purpose markup language that supports a wide variety of applications. &nbsp;It is a useful attachment if you know who the file is from, so you should not block it. &nbsp;<br />
<br />
As with any attachment, do open any without knowing who the sender is and are you expecting it.
</div>


:sheila54603,

The Extensible Markup Language (XML) is a W3C-recommended general-purpose markup language that supports a wide variety of applications.  It is a useful attachment if you know who the file is from, so you should not block it.  

As with any attachment, do open any without knowing who the sender is and are you expecting it.

<div>
<div class="content wysiwyg-content">
Is it best practice to block xml files from email? I'd like to know if it's &quot;ok&quot; to allow xml files as email attachments. It appears to me that xml files could be little programs with wrongful intent, but I am not an expert. Please advise.
</div>
</div>


Is it best practice to block xml files from email? I'd like to know if it's "ok" to allow xml files as email attachments. It appears to me that xml files could be little programs with wrongful intent, but I am not an expert. Please advise.

Should xml files be blocked email attachments?

An email client, email reader or more formally mail user agent (MUA) is a computer program in the category of groupware environments used to access and manage a user's email. A web application that provides message management, composition, and reception functions may internally act as an email client; as a whole, it is commonly referred to as webmail. Likewise, email client may be referred to a piece of computer hardware or software whose primary or most visible role is to work as an email client. Email clients can also have other systems, like calendars, notes and contact managers.

Email Clients

Within Internet message handling services (MHS), a message transfer agent or mail transfer agent (MTA) or mail relay is software that transfers electronic mail messages from one computer to another using a client–server application architecture. A MTA implements both the client (sending) and server (receiving) portions of the Simple Mail Transfer Protocol (SMTP). The terms mail server, mail exchanger, and MX host may also refer to a computer performing the MTA function. The Domain Name System (DNS) associates a mail server to a domain with mail exchanger (MX) resource records containing the domain name of a host providing MTA services.

Email Servers

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.