Address post-review comments on r56727.

net/base/ssl_config_service.h

Index: net/base/ssl_config_service.h
diff --git a/net/base/ssl_config_service.h b/net/base/ssl_config_service.h
index 748d8e4cec8b81b1851fd80b240893181d6574b8..2cb9a76f572b1f43e8075155bbb1765594568881 100644
--- a/net/base/ssl_config_service.h
+++ b/net/base/ssl_config_service.h
@@ -118,8 +118,9 @@ class SSLConfigService : public base::RefCountedThreadSafe<SSLConfigService> {
   static void EnableDNSSEC();
   static bool dnssec_enabled();
 
-  // Enables the |may_be_manipulated| flag in SSLConfig objects. See the
-  // comment about this flag in |SSLConfig|.
+  // Sets a global flag which causes SetSSLConfigFlags to set the

[wtc, 2010/08/22 04:44:35]

Nit: SetSSLConfigFlags is an implementation detail (protected
method).

How about this?
    Sets a global flag which allows SSL connections to
    be MITM attacked.
or
    Allows SSL connections to be MITM attacked.

+  // |mitm_proxies_allowed| flag in SSLConfig objects. See the comment about
+  // this flag in |SSLConfig|.
   static void AllowMITMProxies();
   static bool mitm_proxies_allowed();
 
@@ -129,12 +130,12 @@ class SSLConfigService : public base::RefCountedThreadSafe<SSLConfigService> {
   static bool false_start_enabled();
 
  protected:
-  // SetFlags sets the values of several flags based on global configuration.
-  static void SetSSLConfigFlags(SSLConfig*);
-
   friend class base::RefCountedThreadSafe<SSLConfigService>;
 
   virtual ~SSLConfigService() {}
+
+  // SetFlags sets the values of several flags based on global configuration.
+  static void SetSSLConfigFlags(SSLConfig*);
 };
 
 }  // namespace net