Prevent usage of web payments API over insecure HTTPS.

chrome/browser/payments/ssl_validity_checker.h

Index: chrome/browser/payments/ssl_validity_checker.h
diff --git a/chrome/browser/payments/ssl_validity_checker.h b/chrome/browser/payments/ssl_validity_checker.h
new file mode 100644
index 0000000000000000000000000000000000000000..a8cafcf2069d96b84482061e7c072b8e7199ba69
--- /dev/null
+++ b/chrome/browser/payments/ssl_validity_checker.h
@@ -0,0 +1,27 @@
+// Copyright 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_PAYMENTS_SSL_VALIDITY_CHECKER_H_
+#define CHROME_BROWSER_PAYMENTS_SSL_VALIDITY_CHECKER_H_
+
+#include "base/macros.h"
+
+namespace content {
+class WebContents;
+}
+
+namespace payments {
+
+class SslValidityChecker {
+ public:
+  // Returns true for |web_contents| with a valid SSL certificate.

[Mathieu, 2017/04/17 03:20:45]

would be good to document a little bit what you indicated in the cl description

[please use gerrit instead, 2017/04/17 18:19:54]

Done.

+  static bool IsValidSslCertificate(content::WebContents* web_contents);
+
+ private:
+  DISALLOW_IMPLICIT_CONSTRUCTORS(SslValidityChecker);
+};
+
+}  // namespace payments
+
+#endif  // CHROME_BROWSER_PAYMENTS_SSL_VALIDITY_CHECKER_H_