Fix https://m.gmail.com/ and https://m.googlemail.com/, which don't return a

net/base/transport_security_state.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/transport_security_state.h"
 
 #include "base/base64.h"
 #include "base/command_line.h"
 #include "base/json/json_reader.h"
 #include "base/json/json_writer.h"
@@ skipping 611 matching lines @@
     {13, false, "\007twitter\003com", true, 0 },
     {17, false, "\003www\007twitter\003com", true, 0 },
     {17, false, "\003api\007twitter\003com", true, 0 },
     {17, false, "\003dev\007twitter\003com", true, 0 },
     {22, false, "\010business\007twitter\003com", true, 0 },
 #endif
   };
   static const size_t kNumPreloadedSTS = ARRAYSIZE_UNSAFE(kPreloadedSTS);
 
   static const struct HSTSPreload kPreloadedSNISTS[] = {
-    {11, true, "\005gmail\003com", true, 0 },
-    {16, true, "\012googlemail\003com", true, 0 },
+    {11, false, "\005gmail\003com", true, 0 },
+    {16, false, "\012googlemail\003com", true, 0 },
     // TODO(cevans) -- switch to the subdomain level, once we have a dedicated
     // non-SNI HSTS entry for ssl.google-analytics.com.
     {26, true, "\003www\020google-analytics\003com", false,
      kGoogleAcceptableCerts },
   };
   static const size_t kNumPreloadedSNISTS = ARRAYSIZE_UNSAFE(kPreloadedSNISTS);
 
   for (size_t i = 0; canonicalized_host[i]; i += canonicalized_host[i] + 1) {
     std::string host_sub_chunk(&canonicalized_host[i],
                                canonicalized_host.size() - i);
@@ skipping 60 matching lines @@
   }
 
   LOG(ERROR) << "Rejecting public key chain for domain " << domain
              << ". Validated chain: " << HashesToBase64String(hashes)
              << ", expected: " << HashesToBase64String(public_key_hashes);
 
   return false;
 }
 
 }  // namespace