>>>>the business rules is the "heart" of the business , and this format is no secure, this issue not matter?
>>>>
>>>
>>
>>>SSL/ authentication can provide all the security you need. What's the issue?
>>too slow?
>>
>>Best Regards
>
> I don't think that would be a problem at all. Remember, you only need to grab the business rules when the application starts running. From then on, you can hold it in memory until the application exits. I through out the suggestion that you could grab the rules on an as-needed basis, but honestly, I would do it all up front.

and you need parsing this xml string, and put the objects in memory, and this issue don't slow? how many rules you talk?

Best regards