net: detect and error out with ESET/NetNanny HTTPS interception + False Start

net/socket/ssl_client_socket_nss.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_
 #define NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_
 #pragma once
 
 #include <certt.h>
 #include <keyt.h>
@@ skipping 160 matching lines @@
   // True if NSS has called HandshakeCallback.
   bool handshake_callback_called_;
 
   // True if the SSL handshake has been completed.
   bool completed_handshake_;
 
   // True if we are lying about being connected in order to merge the first
   // Write call into a Snap Start handshake.
   bool pseudo_connected_;
 
+  // True iff we believe that the user has an ESET product intercepting our
+  // HTTPS connections.
+  bool eset_mitm_detected_;
+
+  // True iff we believe that the user has NetNanny intercepting our HTTPS
+  // connections.
+  bool netnanny_mitm_detected_;
+
   // This pointer is owned by the caller of UseDNSSEC.
   DNSSECProvider* dnssec_provider_;
   // The time when we started waiting for DNSSEC records.
   base::Time dnssec_wait_start_time_;
 
   enum State {
     STATE_NONE,
     STATE_SNAP_START_LOAD_INFO,
     STATE_SNAP_START_WAIT_FOR_WRITE,
     STATE_HANDSHAKE,
@@ skipping 27 matching lines @@
   // 2. Copy client certificates from the "MY" system certificate store into
   //    this store so that we can close the system store when we finish
   //    searching for client certificates.
   static HCERTSTORE cert_store_;
 #endif
 };
 
 }  // namespace net
 
 #endif  // NET_SOCKET_SSL_CLIENT_SOCKET_NSS_H_