Turn off future-timestamp cloud policy checks on desktop

chrome/browser/policy/cloud/cloud_policy_validator.h

Index: chrome/browser/policy/cloud/cloud_policy_validator.h
diff --git a/chrome/browser/policy/cloud/cloud_policy_validator.h b/chrome/browser/policy/cloud/cloud_policy_validator.h
index d53a0c6f91327664d10a157818a61085a7a542e0..08092d6361c9fa6cb923f0f2e13b94e827efb23f 100644
--- a/chrome/browser/policy/cloud/cloud_policy_validator.h
+++ b/chrome/browser/policy/cloud/cloud_policy_validator.h
@@ -79,9 +79,14 @@ class CloudPolicyValidatorBase {
   };
 
   enum ValidateTimestampOption {
-    // The policy must have a timestamp field.
+    // The policy must have a timestamp field and it should be checked against
+    // both the start and end times.
     TIMESTAMP_REQUIRED,
 
+    // The system time is unreliable so we should not validate against the
+    // system timestamp.
+    TIMESTAMP_REQUIRED_BUT_SYSTEM_TIME_UNRELIABLE,

[Mattias Nissler (ping if slow), 2013/09/09 08:00:41]

Naming here is a bit unfortunate given that this class doesn't actually read the
system clock, but gets passed a |now| timestamp (which would better be named
|not_after|). How about renaming this TIMESTAMP_NOT_BEFORE?

+
     // No timestamp field is required.
     TIMESTAMP_NOT_REQUIRED,
   };