Expose TLS settings in the Security panel overview, and call out individual obsolete settings.

chrome/app/generated_resources.grd

 <?xml version="1.0" encoding="utf-8"?>
 
 <!--
 This file contains definitions of resources that will be translated for each
 locale.  The variables is_win, is_macosx, is_linux, and is_posix are available
 for making strings OS specific.  Other platform defines such as use_titlecase
 are declared in build/common.gypi.
 -->
 
 <grit base_dir="." latest_public_release="0" current_release="1"
@@ skipping 14320 matching lines @@
       </message>
       <message name="IDS_CERTIFICATE_CHAIN_ERROR_DESCRIPTION_FORMAT" desc="Description of a security problem with the site's certificate." translateable="false">
         There are issues with the site's certificate chain (<ph name="CERT_ERROR_DESCRIPTION">$1<ex>net::ERR_CERT_AUTHORITY_INVALID</ex></ph>).
       </message>
       <message name="IDS_VALID_SERVER_CERTIFICATE" desc="Summary phrase for a site that has a valid server certificate." translateable="false">
         Valid Certificate
       </message>
       <message name="IDS_VALID_SERVER_CERTIFICATE_DESCRIPTION" desc="Description of a site that has a valid server certificate." translateable="false">
         The connection to this site is using a valid, trusted server certificate.
       </message>
-      <message name="IDS_SECURE_PROTOCOL_AND_CIPHERSUITE" desc="Summary phrase for a site that uses a modern, secure TLS protocol version and ciphersuite." translateable="false">
+      <message name="IDS_SECURE_PROTOCOL_AND_CIPHERSUITE" desc="Summary phrase for a site that uses a modern, secure TLS protocol and ciphersuite." translateable="false">
         Secure TLS connection
       </message>
-      <message name="IDS_SECURE_PROTOCOL_AND_CIPHERSUITE_DESCRIPTION" desc="Description of a site that uses a modern, secure TLS protocol version and ciphersuite." translateable="false">
-        The connection to this site is using a strong protocol version and cipher suite.
+      <message name="IDS_SECURE_PROTOCOL_AND_CIPHERSUITE_DESCRIPTION" desc="Description of a site that uses a modern, secure TLS protocol and ciphersuite." translateable="false">
+        The connection to this site is encrypted and authenticated using a strong protocol (<ph name="PROTOCOL_VERSION">$1<ex>TLS 1.2</ex></ph>), key exchange (<ph name="KEY_EXCHANGE">$2<ex>ECDHE_RSA</ex></ph>), and cipher suite (<ph name="CIPHER_SUTE">$3<ex>AES_128_GCM</ex></ph>).
+      </message>
+      <message name="IDS_CIPHERSUITE_WITH_MAC" desc="Description of a cipher suite that contains a seperate cipher and MAC." translateable="false">

[estark, 2016/04/18 11:46:44]

seperate -> separate

[lgarron, 2016/04/25 23:56:53]

Done!

+        <ph name="CIPHER">$1<ex>AES_256_CBC</ex></ph> with <ph name="MAC">$2<ex>HMAC-SHA1</ex></ph>
+      </message>
+      <message name="IDS_SINGLE_OBSOLETE_TLS_SETTING" desc="Summary phrase for a site that uses an outdated TLS protocol, key exchange, or ciphersuite." translateable="false">
+        Obsolete TLS <ph name="SETTING">$1<ex>protocol</ex></ph>
+      </message>
+      <message name="IDS_TWO_OBSOLETE_TLS_SETTINGS" desc="Summary phrase for a site that uses two of an outdated TLS protocol, key exchange, or ciphersuite." translateable="false">
+        Obsolete TLS <ph name="FIRST_SETTING">$1<ex>protocol</ex></ph> and <ph name="SECOND_SETTING">$2<ex>cipher suite</ex></ph>
+      </message>
+      <message name="IDS_THREE_OBSOLETE_TLS_SETTINGS" desc="Summary phrase for a site that uses an outdated TLS protocol, key exchange, and ciphersuite" translateable="false">
+        Obsolete TLS settings
+      </message>
+      <message name="IDS_SSL_PROTOCOL" desc="The word to describe a TLS protocol." translateable="false">
+        protocol
+      </message>
+      <message name="IDS_SSL_KEY_EXCHANGE" desc="The word to describe a TLS key exchange." translateable="false">
+        key exchange
+      </message>
+      <message name="IDS_SSL_CIPHER_SUITE" desc="The word to describe a TLS cipher suite." translateable="false">
+        cipher suite
+      </message>
+      <message name="IDS_SSL_AN_OBSOLETE" desc="The article and adjective used to describe an obsolete TLS setting." translateable="false">
+        an obsolete
+      </message>
+      <message name="IDS_SSL_A_MODERN" desc="The article and adjective used to describe a modern TLS setting." translateable="false">
+        a modern
+      </message>
+      <message name="IDS_OBSOLETE_SSL_DESCRIPTION" desc="Description of a site that uses an outdated TLS protocol or ciphersuite." translateable="false">
+        The connection to this site uses <ph name="AN_OBSOLETE_OR_A_MODERN_PROTOCOL">$1<ex>an obsolete</ex></ph> protocol (<ph name="PROTOCOL">$2<ex>TLS 1.0</ex></ph>), <ph name="AN_OBSOLETE_OR_A_MODERN_KEY_EXCHANGE">$3<ex>an obsolete</ex></ph> key exchange (<ph name="KEY_EXCHANGE">$4<ex>ECDHE_RSA</ex></ph>), and <ph name="AN_OBSOLETE_OR_A_MODERN_CIPHER_SUITE">$5<ex>an obsolete</ex></ph> cipher suite (<ph name="CIPHER_SUITE">$6<ex>AES_256_CBC with HMAC-SHA1</ex></ph>).
       </message>
       <message name="IDS_SAVE_PASSWORD_DIFFERENT_DOMAINS_TITLE" desc="The title of the save password bubble when the submitted form origin isn't equal to the page origin.">
         Do you want <ph name="PASSWORD_MANAGER_BRAND">$1<ex>Google Chrome</ex></ph> to save your password for <ph name="ORIGIN">$2<ex>example.com</ex></ph>?
       </message>
       <message name="IDS_UPDATE_PASSWORD_DIFFERENT_DOMAINS_TITLE" desc="The title of the update password bubble when the submitted form origin isn't equal to saved credentials origin.">
         Do you want <ph name="PASSWORD_MANAGER_BRAND">$1<ex>Google Chrome</ex></ph> to update your password for <ph name="ORIGIN">$2<ex>example.com</ex></ph>?
       </message>
       <message name="IDS_MANAGE_PASSWORDS_TITLE_DIFFERENT_DOMAIN" desc="The title text that is used in the manage passwords bubble when a password is autofilled or after a user has stored a password.">
         Saved passwords for <ph name="ORIGIN">$1<ex>example.com</ex></ph>:
       </message>
@@ skipping 310 matching lines @@
     <message name="IDS_IME_API_ACTIVATED_WARNING" desc="The Warning info when an IME extension is trying to activate.">
       <ph name="EXTENSION_NAME">$1<ex>Gmail Checker</ex></ph> extension may collect all the text you type, including personal data like passwords and credit card numbers. Do you want to use this extension?
     </message>
     <message name="IDS_IME_API_NEVER_SHOW" desc="Checkbox that controls whether this bubble will be shown every time.">
       Never show this again.
     </message>
 
     </messages>
   </release>
 </grit>