Remove the "snionly" concept from the HSTS preload.

Remove the "snionly" concept from the HSTS preload.

The "snionly" tag only applies to preloaded values and only affects
people who are forcing SSLv3 on the command line. (We no longer have the
option in the preferences to disable TLS and the preference has been
renamed so even those who might have set it in the past shouldn't have
it now).

It also complicates pending work to reduce the size of the preload data.

BUG=102779
R=eroman@chromium.org, rsleevi@chromium.org

Committed: https://crrev.com/5cbb7d7a2ce034432b7d56f5940009bc75c337d4
Cr-Commit-Position: refs/heads/master@{#296821}

[agl, 2014-09-18 20:29:54]

agl@chromium.org changed reviewers:
+ rsleevi@chromium.org

[palmer, 2014-09-18 20:33:56]

Possible BUG= : https://code.google.com/p/chromium/issues/detail?id=102779 or
https://code.google.com/p/chromium/issues/detail?id=113280

[eroman, 2014-09-18 20:59:57]

eroman@chromium.org changed reviewers:
+ eroman@chromium.org

[eroman, 2014-09-18 20:59:58]

lgtm for webui/net_internals/*

[agl, 2014-09-24 22:12:55]

poke.

[Ryan Sleevi, 2014-09-25 17:50:37]

LGTM. Sorry for the delays.

https://codereview.chromium.org/578553004/diff/60001/net/http/transport_secur...
File net/http/transport_security_state_static.json (right):

https://codereview.chromium.org/578553004/diff/60001/net/http/transport_secur...
net/http/transport_security_state_static.json:1193: { "name": "www.rme.li",
"mode": "force-https" }
What's the deal with these domains? Why'd we ever include them in the sni-only
list? Accident?

[agl, 2014-09-25 18:16:35]

https://codereview.chromium.org/578553004/diff/60001/net/http/transport_secur...
File net/http/transport_security_state_static.json (right):

https://codereview.chromium.org/578553004/diff/60001/net/http/transport_secur...
net/http/transport_security_state_static.json:1193: { "name": "www.rme.li",
"mode": "force-https" }
On 2014/09/25 17:50:37, Ryan Sleevi (expect_delays) wrote:
> What's the deal with these domains? Why'd we ever include them in the sni-only
> list? Accident?

There are sites that requested preloading but which only work with SNI.

[agl, 2014-09-25 18:51:24]

The CQ bit was checked by agl@chromium.org

[commit-bot: I haz the power, 2014-09-25 18:53:25]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/578553004/80001

[commit-bot: I haz the power, 2014-09-25 19:06:42]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2014-09-25 19:06:43]

Try jobs failed on following builders:
  android_dbg_tests_recipe on tryserver.chromium.linux
(http://build.chromium.org/p/tryserver.chromium.linux/builders/android_dbg_tes...)
  chromium_presubmit on tryserver.chromium.linux
(http://build.chromium.org/p/tryserver.chromium.linux/builders/chromium_presub...)

[agl, 2014-09-25 20:36:23]

The CQ bit was checked by agl@chromium.org

[commit-bot: I haz the power, 2014-09-25 20:36:45]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/578553004/100001

[commit-bot: I haz the power, 2014-09-25 20:47:23]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2014-09-25 20:47:24]

Try jobs failed on following builders:
  chromium_presubmit on tryserver.chromium.linux
(http://build.chromium.org/p/tryserver.chromium.linux/builders/chromium_presub...)

[agl, 2014-09-25 23:15:24]

Committed patchset #6 (id:100001) manually as 5cbb7d7 (presubmit successful).

[commit-bot: I haz the power, 2014-09-25 23:15:39]

Patchset 6 (id:??) landed as
https://crrev.com/5cbb7d7a2ce034432b7d56f5940009bc75c337d4
Cr-Commit-Position: refs/heads/master@{#296821}