Bug#916347: (no subject)

[mcatanzaro at gnome.org]

Thanks Jeremy!

The GStreamer issue is unfortunate indeed, although it comes to mind 
that it is not as important for Debian, since gstreamer-libav is 
available in Debian and YouTube still provides non-MSE H.264 video. So 
low-quality video will still be available, which is a lot better than 
no video. This was not the best example for me to have used yesterday.

But equally problematic is the Debian security team's lack of interest 
in allowing updates to the security-critical WebKitGTK+ package, which 
is currently vulnerable to issues since WSA-2018-0003 [1]. I've been 
complaining about this for about three years now, and it's clear that 
the situation is irreconcilable with Debian's package stability 
policies. Although *very happy* with Debian's packaging in testing and 
unstable, the stable package is old, insufficient for the modern web, 
unsafe to use for its intended purpose, and really only serves to harm 
users' impression of Epiphany. Web browsers are special, and Debian's 
conservative packaging rules simply do not work here. So long as Debian 
maintains its position of not updating WebKitGTK+ in stable, it is 
harmful for it to remain in the stable distro.

Michael

[1] https://webkitgtk.org/security.html