sources.list urls for Etch

[danny@dannysrealm.com]

Hi Everyone,
I have Etch and got my systems (laptop and desktop) running nicely.
I an still realitively new to Debian/Linux and love it.
I understand Etch is frozen and will soon be the stable version.
I want to make sure I have the correct urls in my sources.list file.

This is what I have now:

deb http://mirrors.kernel.org/debian/ testing main
deb-src http://mirrors.kernel.org/debian/ testing main

deb http://security.debian.org/ testing/updates main

I looked every where and cannot find anything conclusive.
This is what I have found so far:

deb http://ftp.debian.org/debian/ etch main contrib non-free
deb-src http://ftp.debian.org/debian/ etch main contrib non-free

I am in the United States.

Will these work?
What about the kernel?
How about security udates?

I use aptitude to maintain my systems and don't want to break anything
when I update.

Thanks,
Danny Murdoch