Do not roll back to SSL 3.0 for Google properties.

net/ssl/ssl_config_service.cc

Index: net/ssl/ssl_config_service.cc
diff --git a/net/ssl/ssl_config_service.cc b/net/ssl/ssl_config_service.cc
index f46dd7b7dc72450d91be28d10b4a9c3135837fac..b1a734995ecf2d8a3594a730de3951c2cc470659 100644
--- a/net/ssl/ssl_config_service.cc
+++ b/net/ssl/ssl_config_service.cc
@@ -40,6 +40,7 @@ SSLConfig::SSLConfig()
       cached_info_enabled(false),
       channel_id_enabled(true),
       false_start_enabled(true),
+      ssl3_fallback_enabled(false),
       send_client_cert(false),
       verify_ev_cert(false),
       version_fallback(false),
@@ -154,8 +155,10 @@ void SSLConfigService::ProcessConfigUpdate(const SSLConfig& orig_config,
       (orig_config.version_min != new_config.version_min) ||
       (orig_config.version_max != new_config.version_max) ||
       (orig_config.disabled_cipher_suites !=
-       new_config.disabled_cipher_suites) ||
+          new_config.disabled_cipher_suites) ||
       (orig_config.channel_id_enabled != new_config.channel_id_enabled) ||
+      (orig_config.ssl3_fallback_enabled !=
+          new_config.ssl3_fallback_enabled) ||

[wtc, 2013/04/18 18:15:34]

Please add this test after the false_start_enabled test
to match the declaration order of these members.

       (orig_config.false_start_enabled != new_config.false_start_enabled);
 
   if (config_changed)