Preload HSTS and pins for two more Google domains.

net/base/transport_security_state_static.json

Index: net/base/transport_security_state_static.json
diff --git a/net/base/transport_security_state_static.json b/net/base/transport_security_state_static.json
index d70bed0cabde6bf71ec6256191ffc75830a0d275..ed622a369d070d3072e23dcfd958c85634c1cc2c 100644
--- a/net/base/transport_security_state_static.json
+++ b/net/base/transport_security_state_static.json
@@ -176,6 +176,7 @@
 
     // Other Google-related domains that must use HTTPS.
     { "name": "market.android.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "developer.android.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },

[agl, 2013/01/18 19:08:38]

This breaks for me in HTTPS.

     { "name": "ssl.google-analytics.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "drive.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "googleplex.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
@@ -186,6 +187,7 @@
     { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "code.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "googlecode.com", "include_subdomains": true, "pins": "google" },
+    { "name": "dl.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },

[agl, 2013/01/18 19:08:38]

Have you checked with jchacon@?

 
     // chart.apis.google.com is *not* HSTS because the certificate doesn't match
     // and there are lots of links out there that still use the name. The correct