Do not roll back to SSL 3.0 for Google properties.

chrome/common/chrome_switches.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/chrome_switches.h"
 
 #include "base/base_switches.h"
 #include "base/command_line.h"
 
 namespace switches {
@@ skipping 302 matching lines @@
 const char kDisableExtensionsHttpThrottling[] =
     "disable-extensions-http-throttling";
 
 // Disable mandatory enforcement of web_accessible_resources in extensions.
 const char kDisableExtensionsResourceWhitelist[] =
     "disable-extensions-resource-whitelist";
 
 // Disables automatically making app run in full screen in force app mode.
 const char kDisableFullscreenApp[]          = "disable-fullscreen-app";
 
+// Disables enforcement of minimum SSL version for preloaded HSTS entries.
+// For preloaded Google properties the minimum version is TLS 1.0.
+// For others the minimum version is still SSL 3.0, i.e., it has no effect.
+const char kDisableSSLVersionMinPreloaded[] =
+    "disable-ssl-version-min-preloaded";

[wtc, 2013/04/17 19:49:50]

The CL's description says this option is
--ssl-version-min-preloaded-disabled. Please update the CL's
description.

[thaidn_google, 2013/04/17 22:16:07]

I change it to --enable-ssl3-version-fallback, and update the CL's description.

On 2013/04/17 19:49:50, wtc wrote:

+
 // Disable Instant extended API.
 const char kDisableInstantExtendedAPI[]     = "disable-instant-extended-api";
 
 // Disables improved SafeBrowsing download protection.
 const char kDisableImprovedDownloadProtection[] =
     "disable-improved-download-protection";
 
 // Don't resolve hostnames to IPv6 addresses. This can be used when debugging
 // issues relating to IPv6, but shouldn't otherwise be needed. Be sure to file
 // bugs if something isn't working properly in the presence of IPv6. This flag
@@ skipping 1353 matching lines @@
 
 // -----------------------------------------------------------------------------
 // DO NOT ADD YOUR CRAP TO THE BOTTOM OF THIS FILE.
 //
 // You were going to just dump your switches here, weren't you? Instead, please
 // put them in alphabetical order above, or in order inside the appropriate
 // ifdef at the bottom. The order should match the header.
 // -----------------------------------------------------------------------------
 
 }  // namespace switches