net: detect and error out with ESET/NetNanny HTTPS interception + False Start

net/socket/ssl_client_socket_nss.h

Index: net/socket/ssl_client_socket_nss.h
diff --git a/net/socket/ssl_client_socket_nss.h b/net/socket/ssl_client_socket_nss.h
index 7b9809b1776ab3fa34f1efb082889ad8a24b2d38..db567c477d54ef88aac1edb20ccbca31d30f7074 100644
--- a/net/socket/ssl_client_socket_nss.h
+++ b/net/socket/ssl_client_socket_nss.h
@@ -178,6 +178,14 @@ class SSLClientSocketNSS : public SSLClientSocket {
   // Write call into a Snap Start handshake.
   bool pseudo_connected_;
 
+  // True iff we believe that the user has an ESET product intercepting our
+  // HTTPS connections.
+  bool eset_mitm_detected_;
+
+  // True iff we believe that the user has NetNanny intercepting our HTTPS
+  // connections.
+  bool netnanny_mitm_detected_;
+
   // This pointer is owned by the caller of UseDNSSEC.
   DNSSECProvider* dnssec_provider_;
   // The time when we started waiting for DNSSEC records.