secure unpickle?

[Paul Rubin]

jjl at pobox.com (John J. Lee) writes:
> marshal
> 
> The docs have similar warnings, though.

Marshal has an additional problem, which is that the format can change
incompatibly between one Python version and another.  So if you use
marshal for object persistence and upgrade your Python instance, you
can be screwed.

There is no clearly good solution to this issue.  There are a couple
of bug entries in Sourceforge about it.