This CL changes the lifespan of SSLConnectJobMessengers so that they are created only when needed,

net/socket/ssl_client_socket_nss.cc

Index: net/socket/ssl_client_socket_nss.cc
diff --git a/net/socket/ssl_client_socket_nss.cc b/net/socket/ssl_client_socket_nss.cc
index db1b2b2477e9a92668b874113e83a359306c7585..7d7021ef4c10b188235a60256c1c7b70a4f0a2b4 100644
--- a/net/socket/ssl_client_socket_nss.cc
+++ b/net/socket/ssl_client_socket_nss.cc
@@ -2881,6 +2881,11 @@ bool SSLClientSocketNSS::GetSSLInfo(SSLInfo* ssl_info) {
   return true;
 }
 
+std::string SSLClientSocketNSS::GetSessionCacheKey() const {
+  NOTREACHED();
+  return "";

[Ryan Sleevi, 2014/07/25 21:40:07]

std::string() - but it does seem very weird, since we can and do format the
session key for NSS sockets.

[mshelley, 2014/07/28 21:05:32]

This method was changed from a static method to a method of
SSLClientSocketOpenSSL somewhere in https://codereview.chromium.org/353713005/
because there wasn't really any reason for it to be static. I can't actually
find any place in SSLClientSocketNSS where a cache key is created...but it
doesn't seem to have an equivalent static method that this could replace.

[Ryan Sleevi, 2014/07/28 23:47:38]

Surprisingly hidden,
https://code.google.com/p/chromium/codesearch#chromium/src/net/socket/ssl_cli...

+}
+
 bool SSLClientSocketNSS::InSessionCache() const {
   // For now, always return true so that SSLConnectJobs are never held back.
   return true;