Hi,

until now, we've been shipping the latest iceweasel (-release branch),
because it was the only relatively cheap way for us to get a "recent
enough" iceweasel for Tails needs.

Debian Wheezy will ship with iceweasel "Extended Support Release"
instead:

  https://www.mozilla.org/en-US/firefox/organizations/faq/
  https://wiki.mozilla.org/Enterprise/Firefox/ExtendedSupport:Proposal

Currently, that release branch is available in mozilla.debian.net's
Squeeze (iceweasel-esr) repository, and in Debian sid (currently,
that's 10.0.3esr-2), while the -release branch (currently, that's
11.0-2) is in Debian experimental.

I think we should do the same as Debian Wheezy.

Deciding to follow the -release branch instead would have a few
drawbacks for us:
 - continuously need to wait and cherry-pick updated add-ons from sid
   (as we've been doing for a while, breaks the build process more
   often than not)
 - no security support from the Debian security team
 - more work to get a new iceweasel, that fixes this or that serious
   security issues, integrated into Tails, due to the need to do
   a major iceweasel upgrade => more days of exposure to security bugs
   for Tails users

Thoughts?

Cheers,
-- 
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
  | Do not be trapped by the need to achieve anything.
  | This way, you achieve everything.
_______________________________________________
tails-dev mailing list
[email protected]
https://mailman.boum.org/listinfo/tails-dev

Reply via email to