Seems like a reasonable concession to make during these unprecedented times. Sites using CSRF tokens properly should be fine. Mozilla did the same for their TL

Seems like a reasonable concession to make during these unprecedented times. Sites using CSRF tokens properly should be fine. Mozilla did the same for their TLS 1.0/TLS 1.1 change: https://hacks.mozilla.org/2020/02/its-the-boot-for-tls-1-0-and-tls-1-1/ https://hacks.mozilla.org/2020/02/its-the-boot-for-tls-1-0-a...