Just for fun - PickleRPC

Irmen de Jong irmen at -NOSPAM-REMOVE-THIS-xs4all.nl
Fri Feb 28 13:02:31 EST 2003


Michael Ströder wrote:
> Skip Montanaro wrote:
> 
>> I wound up with
>> an RPC protocol running over raw sockets which uses pickle as the
>> serialization format.
> 
> 
> How do you deal with security?
> 
> http://www.python.org/doc/current/lib/pickle-sec.html
> 
> Ciao, Michael.

It shouldn't be too difficult to switch the default pickle implementation
to a secure, XML based algorithm such as:

xml.marshal.generic   from PyXML
gnosis.xml.pickle     from Gnosis' utilities

In Pyro you're free to select any of the three mentioned algorithms.
Built-in pickle is the fastest by far, btw.

Irmen.





More information about the Python-list mailing list