Turn off future-timestamp cloud policy checks on desktop

chrome/browser/policy/cloud/cloud_policy_validator.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_POLICY_CLOUD_CLOUD_POLICY_VALIDATOR_H_
 #define CHROME_BROWSER_POLICY_CLOUD_CLOUD_POLICY_VALIDATOR_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 61 matching lines @@
   enum ValidateDMTokenOption {
     // The policy must have a non-empty DMToken.
     DM_TOKEN_REQUIRED,
 
     // The policy may have an empty or missing DMToken, if the expected token
     // is also empty.
     DM_TOKEN_NOT_REQUIRED,
   };
 
   enum ValidateTimestampOption {
-    // The policy must have a timestamp field.
+    // The policy must have a timestamp field and it should be checked against
+    // both the start and end times.
     TIMESTAMP_REQUIRED,
 
+    // The system time is unreliable so we should not validate against the
+    // system timestamp.
+    TIMESTAMP_REQUIRED_BUT_SYSTEM_TIME_UNRELIABLE,

[Mattias Nissler (ping if slow), 2013/09/09 08:00:41]

Naming here is a bit unfortunate given that this class doesn't actually read the
system clock, but gets passed a |now| timestamp (which would better be named
|not_after|). How about renaming this TIMESTAMP_NOT_BEFORE?

+
     // No timestamp field is required.
     TIMESTAMP_NOT_REQUIRED,
   };
 
   virtual ~CloudPolicyValidatorBase();
 
   // Validation status which can be read after completion has been signaled.
   Status status() const { return status_; }
   bool success() const { return status_ == VALIDATION_OK; }
 
@@ skipping 182 matching lines @@
 };
 
 typedef CloudPolicyValidator<enterprise_management::CloudPolicySettings>
     UserCloudPolicyValidator;
 typedef CloudPolicyValidator<enterprise_management::ExternalPolicyData>
     ComponentCloudPolicyValidator;
 
 }  // namespace policy
 
 #endif  // CHROME_BROWSER_POLICY_CLOUD_CLOUD_POLICY_VALIDATOR_H_