security.debian.org mirrors?

["Marcelo E. Magallon" <mmagallo@efis.ucr.ac.cr>]

> >     http://security.debian.org/dists/stable/updates/source/cron_3.0pl1-50.2.diff.gz

> Is there any algorythm which decides where will be the updates published?
> Security updates why aren't proposed-updates? Why isn't the procmail
> update a security-update?

Today I realized this very same thing.  Security and proposed-updates are
not the same thing, or are, at least, not in sync.  Where do I find
information on mirroring securiry.debian.org; rsync
anonymous@security.debian.org:: lists only debian-non-US.

TIA,

	Marcelo