Comment 15 for bug 1291091

Agreed, this sounds like the sort of situation which warrants some sort of documented and published recommendations, but I don't think it's something we would issue a security advisory around.