Add a note to avoid SSLServerSocket in new code.

net/socket/ssl_server_socket.h

Index: net/socket/ssl_server_socket.h
diff --git a/net/socket/ssl_server_socket.h b/net/socket/ssl_server_socket.h
index bfbe7de91107bda3b35a7e1315ae3bb7c41650ae..ed73477d0a78c6bcf7b19ac6af9f3f33fdc3261a 100644
--- a/net/socket/ssl_server_socket.h
+++ b/net/socket/ssl_server_socket.h
@@ -11,6 +11,8 @@
 #include "net/socket/ssl_socket.h"
 #include "net/socket/stream_socket.h"
 
+// This header should not be used in new code, outside of unit tests.

[Ryan Sleevi, 2016/01/25 22:21:04]

That seems sort of small and hard to miss.

The header-level documentation goes before the includes (per
https://google.github.io/styleguide/cppguide.html#File_Comments )

// found in the LICENSE file.
//
// NOTE: This class is provided to support existing Chromium
// consumers; it is NOT intended for use in NEW code. In
// particular, it is explicitly NOT supported on iOS and has no
// such plans for the forseeable future. Configuring a TLS
// server correctly is a dangerous, security-sensitive activity
// with many subtle nuances, and thus care should be taken to
// discuss with //net/OWNERS before any new usages.
//
// As such, this header should be treated as an internal
// implementation detail of //net (where it's used for some
// unit test infrastructure), not as appropriate for general use.
//
// TODO(rsleevi? davidben?): See https://crbug.com/foo for more
// details.

And we should file a bug capturing our collective grumps on it :)

+
 namespace crypto {
 class RSAPrivateKey;
 }  // namespace crypto