| Index: chrome/browser/local_discovery/privet_http.h
|
| diff --git a/chrome/browser/local_discovery/privet_http.h b/chrome/browser/local_discovery/privet_http.h
|
| index 2cbd5ceb489b1dbd15124d1c7db05bb116040797..0786cbdc08858468211098b070b1b81fa151fb6e 100644
|
| --- a/chrome/browser/local_discovery/privet_http.h
|
| +++ b/chrome/browser/local_discovery/privet_http.h
|
| @@ -63,8 +63,16 @@ class PrivetHTTPClient {
|
| virtual void RefreshPrivetToken(
|
| const PrivetURLFetcher::TokenCallback& token_callback) = 0;
|
|
|
| - // After this call HTTPS will be used. Only requests to the server with
|
| + // After this call only HTTPS will be used. Only requests to the server with
|
| // matching certificate will be allowed.
|
| + // Privet v3 devices MUST support HTTPS. Before communicating over HTTPS,
|
| + // Privet v3 pairing generates a shared secret using SPAKE2 over an
|
| + // unauthenticated channel. This shared secret is used to then authenticate
|
| + // the fingerprint of a certificate, which is self-signed. The client then
|
| + // validates that the HTTPS peer is sending a certificate matching that
|
| + // fingerprint.
|
| + // For more information on this protocol:
|
| + // https://developers.google.com/cloud-devices/v1/reference/local-api/pairing_start
|
| virtual void SwitchToHttps(
|
| uint16_t port,
|
| const net::SHA256HashValue& certificate_fingerprint) = 0;
|
|
|