PyYaml?

Jeremy Bowers jerf at jerf.org
Sat Sep 18 01:14:06 EDT 2004


On Sat, 18 Sep 2004 04:20:14 +0000, Chris S. wrote:

> Is there any benefit to Pickle over YAML? Given that Pickle is insecure, 
> wouldn't it make more sense to support a secure serialization format, 
> one that's even readable to boot, such as YAML? 

Anything that can "pickle" will be insecure. It is the capabilities of
pickling, not the implementation, that is insecure.




More information about the Python-list mailing list