Reference: https://groups.google.com/a/mozilla.org/g/dev-security-polic...