> with the standard setting of the session resumption lifetime in many current browsers

> seven days, as recommended upper limit

Do we fix this by changing that setting to a few hours?

Edit: the report discusses this: "The recommended upper limit of the session resumption lifetime in TLS 1.3 [19] of seven days should be reduced to hinder tracking based on this mechanism. We propose an upper lifetime limit of ten minutes based on our empirical observations"