Do not roll back to SSL 3.0 for Google properties.

net/ssl/ssl_config_service.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SSL_SSL_CONFIG_SERVICE_H_
 #define NET_SSL_SSL_CONFIG_SERVICE_H_
 
 #include <vector>
 
 #include "base/basictypes.h"
@@ skipping 73 matching lines @@
   // big-endian form, they should be declared in host byte order, with the
   // first uint8 occupying the most significant byte.
   // Ex: To disable TLS_RSA_WITH_RC4_128_MD5, specify 0x0004, while to
   // disable TLS_ECDH_ECDSA_WITH_RC4_128_SHA, specify 0xC002.
   std::vector<uint16> disabled_cipher_suites;
 
   bool cached_info_enabled;  // True if TLS cached info extension is enabled.
   bool channel_id_enabled;  // True if TLS channel ID extension is enabled.
   bool false_start_enabled;  // True if we'll use TLS False Start.
 
+  // True if SSL3 version fallback is applied when an initial TLS 1.0 handshake
+  // fails.

[wtc, 2013/04/17 23:22:05]

This description does not reflect the actual meaning of this
boolean member. It fails to describe the IsGooglePinnedProperty
aspect.

[thaidn_google, 2013/04/18 00:05:50]

Done.

+  bool ssl3_version_fallback_enabled;

[wtc, 2013/04/17 23:22:05]

Remove "version". "ssl3_fallback_enabled" is sufficient.

(The |version_fallback| member below was originally named
|ssl3_fallback|. I generalized it to |version_fallback| in
https://chromiumcodereview.appspot.com/10377022.)

[thaidn_google, 2013/04/18 00:05:50]

Done.

+
   // TODO(wtc): move the following members to a new SSLParams structure.  They
   // are not SSL configuration settings.
 
   struct NET_EXPORT CertAndStatus {
     CertAndStatus();
     ~CertAndStatus();
 
     std::string der_cert;
     CertStatus cert_status;
   };
@@ skipping 101 matching lines @@
   void ProcessConfigUpdate(const SSLConfig& orig_config,
                            const SSLConfig& new_config);
 
  private:
   ObserverList<Observer> observer_list_;
 };
 
 }  // namespace net
 
 #endif  // NET_SSL_SSL_CONFIG_SERVICE_H_