question: how to transfer objects between server and client?

[Lawrence D'Oliveiro]

In message <1186826410.019139.121680 at l70g2000hse.googlegroups.com>,
OpenPavilion wrote:

> just found out, that if I use "pickle.dumps(object)" (on client side)
> and "pickle.loads(object)" (on server side) before and after sending,
> I have access to the object.

That's assuming that the client and server can trust each other. If you
can't be sure of that, then this sounds like it could be a security hole.