Re: Pyro 4.20 serpent serializer issues

On 14-6-2013 6:17, Vernon D. Cole wrote:
> Mostly I want the Python version restriction to go away. Users should not need to know
> which version of Python the server is running.

Ah, yes. That will be solved when not using pickle.

> But security is an issue, too. The
> database password is in clear text, and who knows what sensitive information might be in
> the data records. Changing serializers will be worth the trouble as soon as I have time
> to implement the change.

I don't see how not using pickle will help here: Pyro still transmits everything across
the wire in plain text, regardless of the serializer used.

Irmen


------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev