I think it's worth including NSS Labs' response, too. Adds a nice touch of color to the whole debate about "real world testing."

https://www.nsslabs.com/blog/dont-shoot-messenger