If you haven't seen it already, check out https://blog.mozilla.org/security/2020/01/09/crlite-part-1-a...
(Disclaimer: I work for Mozilla and have helped with the rollout of this)
(Disclaimer: I work for Mozilla and have helped with the rollout of this)