Discussion and response on Mozilla's dev-security-policy list:<p><a href="https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4" rel="nofollow">https://groups.google.com/a/mozilla.org/g/dev-security-polic...</a>