On Friday, September 20, 2013 3:59:47 PM UTC+2, Donald Stufft wrote:

>
> A basic tenant in securing systems is that you make each piece of the 
> system responsible for it's own security and you don't have it depend on 
> the security of another system. Moving away from pickle as the default 
> serialization engine ensures this property for the storage of session data.
>
 
Thank you for the response, Donald. This is a point of view I didn't 
consider. I tend to think of the "backend platform" as unitary and 
data-centered, implying that compromising the security of the data servers 
will compromise the entire business. What I didn't consider is that this is 
just MY point of view. Your point makes perfect sense, the decision coming 
from a web framework.

Davide

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/django-developers.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to