Distinguish STS observation times from PKP observation times.

net/http/transport_security_state.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_TRANSPORT_SECURITY_STATE_H_
 #define NET_HTTP_TRANSPORT_SECURITY_STATE_H_
 
 #include <map>
 #include <string>
 #include <utility>
@@ skipping 77 matching lines @@
     // DomainState, HTTP requests should be internally redirected to HTTPS
     // (also if the "ws" WebSocket request should be upgraded to "wss")
     bool ShouldUpgradeToSSL() const;
 
     // ShouldSSLErrorsBeFatal returns true iff HTTPS errors should cause
     // hard-fail behavior (e.g. if HSTS is set for the domain)
     bool ShouldSSLErrorsBeFatal() const;
 
     UpgradeMode upgrade_mode;
 
-    // The absolute time (UTC) when this DomainState was first created.
+    // The absolute time (UTC) when the |upgrade_mode| was observed.
     //
-    // Static entries do not have a created time.
-    base::Time created;
+    // TODO(palmer): Perhaps static entries should have an "observed" time.
+    base::Time sts_observed;
+
+    // The absolute time (UTC) when the |dynamic_spki_hashes| (and other
+    // |dynamic_*| state) were observed.
+    //
+    // TODO(palmer): Perhaps static entries should have an "observed" time.
+    base::Time pkp_observed;

[Ryan Sleevi, 2013/07/02 23:41:10]

FWIW, should you also add these fields to net-internals? O:)

[palmer, 2013/07/08 22:48:16]

I was debating it. Yeah I will if you think I should.

 
     // The absolute time (UTC) when the |upgrade_mode|, if set to
     // UPGRADE_ALWAYS, downgrades to UPGRADE_NEVER.
     base::Time upgrade_expiry;
 
     // Are subdomains subject to this DomainState, for the purposes of
     // upgrading to HTTPS?
     bool sts_include_subdomains;
 
     // Are subdomains subject to this DomainState, for the purposes of
@@ skipping 207 matching lines @@
   DomainStateMap enabled_hosts_;
 
   Delegate* delegate_;
 
   DISALLOW_COPY_AND_ASSIGN(TransportSecurityState);
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_TRANSPORT_SECURITY_STATE_H_