Add a note to avoid SSLServerSocket in new code.

net/socket/ssl_server_socket.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_SOCKET_SSL_SERVER_SOCKET_H_
 #define NET_SOCKET_SSL_SERVER_SOCKET_H_
 
 #include "base/memory/scoped_ptr.h"
 #include "net/base/completion_callback.h"
 #include "net/base/net_export.h"
 #include "net/socket/ssl_socket.h"
 #include "net/socket/stream_socket.h"
 
+// This header should not be used in new code, outside of unit tests.

[Ryan Sleevi, 2016/01/25 22:21:04]

That seems sort of small and hard to miss.

The header-level documentation goes before the includes (per
https://google.github.io/styleguide/cppguide.html#File_Comments )

// found in the LICENSE file.
//
// NOTE: This class is provided to support existing Chromium
// consumers; it is NOT intended for use in NEW code. In
// particular, it is explicitly NOT supported on iOS and has no
// such plans for the forseeable future. Configuring a TLS
// server correctly is a dangerous, security-sensitive activity
// with many subtle nuances, and thus care should be taken to
// discuss with //net/OWNERS before any new usages.
//
// As such, this header should be treated as an internal
// implementation detail of //net (where it's used for some
// unit test infrastructure), not as appropriate for general use.
//
// TODO(rsleevi? davidben?): See https://crbug.com/foo for more
// details.

And we should file a bug capturing our collective grumps on it :)

+
 namespace crypto {
 class RSAPrivateKey;
 }  // namespace crypto
 
 namespace net {
 
 struct SSLServerConfig;
 class X509Certificate;
 
 class SSLServerSocket : public SSLSocket {
@@ skipping 29 matching lines @@
 // returned socket.
 NET_EXPORT scoped_ptr<SSLServerSocket> CreateSSLServerSocket(
     scoped_ptr<StreamSocket> socket,
     X509Certificate* certificate,
     const crypto::RSAPrivateKey& key,
     const SSLServerConfig& ssl_config);
 
 }  // namespace net
 
 #endif  // NET_SOCKET_SSL_SERVER_SOCKET_H_