NOTE

Java Serializable

Java native serialization, serialVersionUID, compatibility, security risks, and modern alternatives for service/data formats.

JavaCreated 01/17/2020Updated 09/15/20261 min readhistorical

This is a historical learning note and may contain outdated or incomplete understanding.

Serializable is a marker interface for Java’s native object-serialization mechanism. serialVersionUID participates in compatibility checks between serialized form and class definition.

Native Java serialization can encode object graphs, but its format couples data closely to Java classes and has a long history of security risk when deserializing untrusted data.

For APIs, durable storage, and cross-language systems, prefer an explicit schema/data format such as JSON, Protobuf, Avro, or another protocol chosen for the contract. Never treat untrusted native serialized input as harmless.