Addition of Certificate Transparency details to Security panel of DevTools

third_party/WebKit/Source/devtools/protocol.json

 {
     "version": { "major": "1", "minor": "1" },
     "domains": [{
         "domain": "Inspector",
         "hidden": true,
         "types": [],
         "commands": [
             {
                 "name": "enable",
                 "description": "Enables inspector domain notifications.",
@@ skipping 1295 matching lines @@
                 "id": "CertificateValidationDetails",
                 "type": "object",
                 "description": "Details about the validation status of a request's certificate.",
                 "properties": [
                     { "name": "numUnknownScts", "type": "integer", "description": "The number of SCTs from unknown logs." },
                     { "name": "numInvalidScts", "type": "integer", "description": "The number of invalid SCTs." },
                     { "name": "numValidScts", "type": "integer", "description": "The number of valid SCTs." }
                 ]
             },
             {
+                "id": "SignedCertificateTimestamp",
+                "type" : "object",
+                "description": "Details of a signed certificate timestamp (SCT).",
+                "properties": [
+                        { "name": "status", "type": "string", "description": "Validation status." },
+                        { "name": "origin", "type": "string", "description": "Origin." },
+                        { "name": "version", "type": "string", "description": "Version." },
+                        { "name": "logDescription", "type": "string", "description": "Log name / description." },
+                        { "name": "logId", "type": "string", "description": "Log ID." },
+                        { "name": "timestamp", "$ref": "Timestamp", "description": "Issuance date." },
+                        { "name": "hashAlgorithm", "type": "string", "description": "Hash algorithm." },
+                        { "name": "signatureAlgorithm", "type": "string", "description": "Signature algorithm." },
+                        { "name": "signatureData", "type": "string", "description": "Signature data" }
+                ]
+            },
+            {
                 "id": "SecurityDetails",

[pfeldman, 2016/05/23 16:53:43]

This seems like a lot to send per request. What is this used for? Is this
information specific to individual request?

[estark, 2016/05/27 17:14:10]

This information is specific to each request, though generally all requests to
the same origin would have the same SignedCertificateTimestamps. We want to
display it in the per-request view of the Security panel, similar to how you can
see the certificate information for each request today.

What do you think of doing this instead: InspectorResourceAgent could hold on to
the SignedCertificateTimestamps for each request id, and when the security panel
wants to display the SCTs for a request, it sends a command asking for them.
Kind of similar to how getResponseBody() works... I wonder if we should even
store the SCTs on NetworkResourcesData::ResourceData?

                 "type": "object",
                 "description": "Security details about a request.",
                 "properties": [
                     { "name": "protocol", "type": "string", "description": "Protocol name (e.g. \"TLS 1.2\" or \"QUIC\")." },
                     { "name": "keyExchange", "type": "string", "description": "Key Exchange used by the connection." },
                     { "name": "cipher", "type": "string", "description": "Cipher name." },
                     { "name": "mac", "type": "string", "optional": true, "description": "TLS MAC. Note that AEAD ciphers do not have separate MACs." },
                     { "name": "certificateId", "$ref": "CertificateId", "description": "Certificate ID value." },
-                    { "name": "certificateValidationDetails", "$ref": "CertificateValidationDetails", "optional": true, "description": "Validation details for the request's certficate." }
+                    { "name": "certificateValidationDetails", "$ref": "CertificateValidationDetails", "optional": true, "description": "Validation details for the request's certficate." },
+                    { "name": "signedCertificateTimestampList", "type": "array", "items": { "$ref": "SignedCertificateTimestamp" }, "description": "List of signed certificate timestamps (SCTs)." }
                 ]
             },
             {
                 "id": "BlockedReason",
                 "type": "string",
                 "description": "The reason why request was blocked.",
                 "enum": ["csp", "mixed-content", "origin", "inspector", "other"],
                 "hidden": true
             },
             {
@@ skipping 3821 matching lines @@
                 "parameters": [
                     { "name": "origin", "type": "string", "description": "Security origin." },
                     { "name": "storageTypes", "type": "string", "description": "Comma separated origin names." }
                 ],
                 "description": "Clears storage for origin.",
                 "handlers": ["browser"]
             }
         ]
     }]
 }