Bug#648175: iceweasel: firefox addons and integration into debians packaging system

[Christoph Anton Mitterer]

Package: iceweasel

Version: 8.0-2
Severity: wishlist


Hi.

These are some toughts on the addons and their integration in Firefox/Iceweasel, with respect to our
packaging system.

As you know, more and more extensions get specifically packaged for Debian, which is somewhat nice as it
adds security.
- in principle security support through Debian
- one could argue that these are "Debian-trusted" add-ons... in contrast to just something downloaded
  from somewhere on the web.


Now it seems to me that the integration of packaged add-ons with firefox gets more and more complicated.
- With 8.0 I'm asked whether I want to enable my Debian-packaged addos in firefox. Guess this shouldn't be necessary
  at all... as one should typically trust the Debian packages more than anything else.
- It seems that Firefox tries to upgrade Debian-packaged add ons with the web-versions, if something newer is enabled.
  It's totally unclear to me, whether this is secure then (like Debian packages are secured by signatres), so I always
  manually disable this.
  I think however it should be the default, that Debian package based addons are not automatically upgraded.


Cheers,
Chris.