Package: iceweasel

Version: 8.0-2
Severity: wishlist


Hi.

These are some toughts on the addons and their integration in 
Firefox/Iceweasel, with respect to our
packaging system.

As you know, more and more extensions get specifically packaged for Debian, 
which is somewhat nice as it
adds security.
- in principle security support through Debian
- one could argue that these are "Debian-trusted" add-ons... in contrast to 
just something downloaded
  from somewhere on the web.


Now it seems to me that the integration of packaged add-ons with firefox gets 
more and more complicated.
- With 8.0 I'm asked whether I want to enable my Debian-packaged addos in 
firefox. Guess this shouldn't be necessary
  at all... as one should typically trust the Debian packages more than 
anything else.
- It seems that Firefox tries to upgrade Debian-packaged add ons with the 
web-versions, if something newer is enabled.
  It's totally unclear to me, whether this is secure then (like Debian packages 
are secured by signatres), so I always
  manually disable this.
  I think however it should be the default, that Debian package based addons 
are not automatically upgraded.


Cheers,
Chris.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to