ForceTLS: hash hostnames, handle subdomains, canonicalise.

net/base/strict_transport_security_state.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_STRICT_TRANSPORT_SECURITY_STATE_H_
 #define NET_BASE_STRICT_TRANSPORT_SECURITY_STATE_H_
 
 #include <map>
 #include <string>
 
@@ skipping 52 matching lines @@
   void SetDelegate(Delegate*);
 
   bool Serialise(std::string* output);
   bool Deserialise(const std::string& state);
 
  private:
   // If we have a callback configured, call it to let our serialiser know that
   // our state is dirty.
   void DirtyNotify();
 
-  // The set of hosts that have enabled StrictTransportSecurity.
+  // The set of hosts that have enabled StrictTransportSecurity. The keys here
+  // are SHA256(DNSForm(domain)) where DNSForm converts from dotted form
+  // ('www.google.com') to the form used in DNS: "\x03www\x06google\x03com"
   std::map<std::string, State> enabled_hosts_;
 
   // Protect access to our data members with this lock.
   Lock lock_;
 
   // Our delegate who gets notified when we are dirtied, or NULL.
   Delegate* delegate_;
 
+  static std::string CanonicaliseHost(const std::string& host);
+
   DISALLOW_COPY_AND_ASSIGN(StrictTransportSecurityState);
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_STRICT_TRANSPORT_SECURITY_STATE_H_