Bob Kline wrote: > 3. integrity validation (CRC, etc.) This is another thing that zipimport doesn't do (nor does the PEP 273 implementation btw.). It could in theory be added but it doesn't mean much: someone can still put bogus data in a zip file and make marshal crash. So I'm tempted to blame marshal and forget about CRC checking... Just