Index: net/ssl/ssl_config.h |
diff --git a/net/ssl/ssl_config.h b/net/ssl/ssl_config.h |
index 7e6283dd6ad32f39cf1a1b087db40f7cd77a4916..eee5622744c9c204950d96783f167b8280939d74 100644 |
--- a/net/ssl/ssl_config.h |
+++ b/net/ssl/ssl_config.h |
@@ -114,6 +114,12 @@ struct NET_EXPORT SSLConfig { |
// it. https://crbug.com/684730. |
bool deprecated_cipher_suites_enabled; |
+ // Enables the version interference probing mode. While TLS 1.3 has avoided |
+ // most endpoint intolerance, middlebox interference with TLS 1.3 is |
+ // rampant. This causes the connection to be discarded on success with |
+ // ERR_SSL_VERSION_INTERFERENCE. |
+ bool version_interference_probe; |
+ |
bool channel_id_enabled; // True if TLS channel ID extension is enabled. |
// List of Token Binding key parameters supported by the client. If empty, |