This CL changes the lifespan of SSLConnectJobMessengers so that they are created only when needed,

net/socket/ssl_client_socket_nss.cc

Index: net/socket/ssl_client_socket_nss.cc
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc
index 92af627b7f871e3edc19ae201c9da6919fc0a5ee..a386f601904b9f5f9a5915b5d18e42d851ed52f6 100644
--- a/net/socket/ssl_client_socket_nss.cc
+++ b/net/socket/ssl_client_socket_nss.cc
@@ -2834,6 +2834,11 @@ bool SSLClientSocketNSS::GetSSLInfo(SSLInfo* ssl_info) {
   return true;
 }
 
+std::string SSLClientSocketNSS::GetSessionCacheKey() const {
+  NOTREACHED();

[wtc, 2014/08/12 14:51:00]

Nit: perhaps NOTIMPLEMENTED(), to match what you're using in
SetHandshakeCompletionCallback (line 2849)?

[mshelley, 2014/08/12 21:47:01]

Done.

+  return std::string();
+}
+
 bool SSLClientSocketNSS::InSessionCache() const {
   // For now, always return true so that SSLConnectJobs are never held back.
   return true;