We should re-evaluate if all implementations end up using a UUID, and maybe make that into a MUST requirement. * [x] Gecko * [ ] Facebook * [x] Chrome * [X] Edge * [x] Safari