iceweasel: Why mozilla.d.n and not backports.d.o

[Mike Hommey]

On Fri, Nov 11, 2011 at 10:34:08AM +0100, Ansgar Burchardt wrote:
> Hi,
> 
> thanks for your reply.
> 
> Mike Hommey <mh at glandium.org> writes:
> > On Thu, Nov 10, 2011 at 04:16:52PM +0100, Ansgar Burchardt wrote:
> >> I was wondering why the backport for iceweasel has its own repository on
> >> mozilla.debian.net instead of using the official repository on
> >> backports.d.o.  While it would be nice to have a newer version for
> >> squeeze, I am hesitant to use a unofficial repository (which might be
> >> more easy to compromise).
> >
> > First, because the backports.d.o policy is to upload packages that are in
> > testing, which means that typically, it would be available later. But
> > more importantly, because it requires cairo 1.10, which is on
> > mozilla.d.n, but is not suitable for backports.d.o because it breaks
> > things in squeeze (like, iirc, print preview in gimp).
> 
> Ah, okay.  I don't think I would be able to help with these problems.
> 
> > Please note that the repository is signed, so it's not "easy" to
> > compromise.
> 
> Is the private key used to sign the archive stored in a safe location
> (ie. not on alioth)?

Yes it is.

Mike