Ideally the witness should be on a third site, if not then place it at the primary site. If you put it at the DR site and you have a network interruption you could end up with unwanted failovers or the principal suddenly going offline.