Guidelines, principles published on https://infosec.mozilla.org - View it on GitHub