Turn off Expect-Staple reporting for private roots

Turn off Expect-Staple reporting for private roots

Previously, Expect-Staple reports were sent for certificates chaining to
private roots, but with the certificate chains stripped out. However,
these reports are mostly just noise for site owners; they tend to
indicate that a MITM proxy did not provide an OCSP response, which is to
be expected. Moreover, these reports are not useful for answering the
interesting question about MITM proxies, which is whether they blindly
copy Must-Staple extensions (issue 633732). Thus, this CL disables
Expect-Staple reporting for private roots.

BUG=656227
Committed: https://crrev.com/53e947a174c199d639065dea59b736b30fb3bf08
Cr-Commit-Position: refs/heads/master@{#425866}

[estark, 2016-10-15 01:44:30]

The CQ bit was checked by estark@chromium.org to run a CQ dry run

[estark, 2016-10-15 01:49:14]

The CQ bit was checked by estark@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-10-15 01:49:32]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[estark, 2016-10-15 01:50:18]

estark@chromium.org changed reviewers:
+ rsleevi@chromium.org

[estark, 2016-10-15 01:50:19]

rsleevi, PTAL?

[commit-bot: I haz the power, 2016-10-15 03:15:36]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-10-15 03:15:37]

Dry run: This issue passed the CQ dry run.

[Ryan Sleevi, 2016-10-18 01:00:34]

lgtm

[estark, 2016-10-18 01:06:42]

The CQ bit was checked by estark@chromium.org

[commit-bot: I haz the power, 2016-10-18 01:07:25]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-10-18 02:39:54]

Committed patchset #2 (id:20001)

[commit-bot: I haz the power, 2016-10-18 02:43:52]

Description was changed from

==========
Turn off Expect-Staple reporting for private roots

Previously, Expect-Staple reports were sent for certificates chaining to
private roots, but with the certificate chains stripped out. However,
these reports are mostly just noise for site owners; they tend to
indicate that a MITM proxy did not provide an OCSP response, which is to
be expected. Moreover, these reports are not useful for answering the
interesting question about MITM proxies, which is whether they blindly
copy Must-Staple extensions (issue 633732). Thus, this CL disables
Expect-Staple reporting for private roots.

BUG=656227
==========

to

==========
Turn off Expect-Staple reporting for private roots

Previously, Expect-Staple reports were sent for certificates chaining to
private roots, but with the certificate chains stripped out. However,
these reports are mostly just noise for site owners; they tend to
indicate that a MITM proxy did not provide an OCSP response, which is to
be expected. Moreover, these reports are not useful for answering the
interesting question about MITM proxies, which is whether they blindly
copy Must-Staple extensions (issue 633732). Thus, this CL disables
Expect-Staple reporting for private roots.

BUG=656227

Committed: https://crrev.com/53e947a174c199d639065dea59b736b30fb3bf08
Cr-Commit-Position: refs/heads/master@{#425866}
==========

[commit-bot: I haz the power, 2016-10-18 02:43:53]

Patchset 2 (id:??) landed as
https://crrev.com/53e947a174c199d639065dea59b736b30fb3bf08
Cr-Commit-Position: refs/heads/master@{#425866}