[Python-Dev] Cookie.py security

[Fred L. Drake, Jr.]

A.M. Kuchling writes:
 > (Are marshals safer than pickles?  What if SerialCookie used marshal
 > instead?)

  A bit safer, I think, but this maintains the backward compatibility
issue.
  If it is useful to change the API, this is the best time to do it,
but we'd probably want to rename the module as well.  Shared
maintenance is also an issue -- Tim's opinion is very valuable here!


  -Fred

-- 
Fred L. Drake, Jr.  <fdrake at beopen.com>
BeOpen PythonLabs Team Member