On 06/22/2017 10:41 AM, R0b0t1 wrote: > > This is kind of troubling because much like Cabal it seems like the > Rust package management system is insecure. Does the Firefox build > process make use of it? >
It would be against our ebuild policy if it does so. The sources for a package should be listed in SRC_URI and are downloaded and verified by your Gentoo package manager. After that, network access is forbidden.