Remember user decisions on invalid certificates behind a flag

content/public/browser/browser_context.h

Index: content/public/browser/browser_context.h
diff --git a/content/public/browser/browser_context.h b/content/public/browser/browser_context.h
index 1c09777f42b2bd6690fa39a40dbd56b033b79911..3ff3bc2dba44eb666389835ca0321ec600612d30 100644
--- a/content/public/browser/browser_context.h
+++ b/content/public/browser/browser_context.h
@@ -40,6 +40,7 @@ class PushMessagingService;
 class ResourceContext;
 class SiteInstance;
 class StoragePartition;
+class SSLHostStateDecisions;
 
 // This class holds the context needed for a browsing session.
 // It lives on the UI thread. All these methods must only be called on the UI
@@ -149,6 +150,10 @@ class CONTENT_EXPORT BrowserContext : public base::SupportsUserData {
   // responsible for ensuring that it outlives RenderProcessHost. It's valid to
   // return NULL.
   virtual PushMessagingService* GetPushMessagingService() = 0;
+
+  // Returns the SSL host state decisions for this context. The context may
+  // return NULL, implementing the default exception storage strategy.
+  virtual SSLHostStateDecisions* GetSSLHostStateDecisions() = 0;

[jam, 2014/07/31 22:01:08]

per the other comment, this should be moved to a SetDelegate method on
SSLHostState

[jww, 2014/07/31 23:53:10]

Can you clarify what you mean? Since ChromeSSLHostStateDecisions is a keyed
browser service on BrowserContext (similar to SpecialStoragePolicy and
PushMessagingService), it seems like we need to have the
GetSSLHostStateDecisions()  method here as the other keyed browser services
have.

 };
 
 }  // namespace content