[clug] Security of Debian Stable + Backports vs Debian Testing

[Rasjid Wilcox]

I'm looking at moving my hosting arrangements to a User-Mode-Linux virtual 
private server hosting provider. (http://www.redwoodvirtual.com/ is looking 
like the best value so far.)

I'm trying to choose between either running Debian stable with backports (is 
http://backports.org/ the best place to get these?) or just to run Debian 
Testing.

Do people run Testing on production servers?  Is this a grossly insecure thing 
to do, or just a slightly risky thing to do?

I expect the server to eventually be running:
Postfix
LDAP
IMAP (either Courier or Cyrus)
MySQL
Apache + PHP
Some kind of web based groupware (mostly likely php based, but maybe python 
based - eg plone)
A CMS (MySource by Squiz.net)
A DMS (http://docmgr.sourceforge.net/)
Webmin

Any feedback greatly appreciated.

Rasjid.

-- 
Rasjid Wilcox
Canberra, Australia (UTC +11 hrs)
http://www.openminddev.net