Implement referred Token Bindings

net/url_request/url_request_job.cc

Index: net/url_request/url_request_job.cc
diff --git a/net/url_request/url_request_job.cc b/net/url_request/url_request_job.cc
index cbefc9e3f06845da0fd14d2364426f4978dc93a8..239ab4bf6ee57bdc8e582b31c6457e61cea16423 100644
--- a/net/url_request/url_request_job.cc
+++ b/net/url_request/url_request_job.cc
@@ -953,6 +953,14 @@ RedirectInfo URLRequestJob::ComputeRedirectInfo(const GURL& location,
                                  request_->referrer(),
                                  redirect_info.new_url).spec();
 
+  std::string include_referer;
+  request_->GetResponseHeaderByName("include-referer-token-binding-id",
+                                    &include_referer);
+  if (include_referer == "true" &&
+      request_->ssl_info().token_binding_negotiated) {
+    redirect_info.referred_token_binding_host = url.host();

[davidben, 2016/03/15 22:49:56]

To confirm: TB ignores the port, right? It's purely keyed on host?

[nharper, 2016/03/16 17:49:22]

The code that looks up TB/ChannelID keys takes in only a host (and then computes
the eTLD+1 and looks up based on that). The TB spec does not specify exact
behavior.

+  }
+
   return redirect_info;
 }