Include subdomains in the *.google.com HSTS entries. It is neccessary in order to fully protect against "Cookie Forcing": http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html (The attack would otherwise be: 302 the user to http://blah.checkout.google.com/ and then respond with a Set-Cookie for the .checkout.google.com domain, in order to mess with the integrity of that domain via cookie collisions).
Include subdomains in the *.google.com HSTS entries.
It is neccessary in order to fully protect against "Cookie Forcing":
http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
(The attack would otherwise be: 302 the user to http://blah.checkout.google.com/
and then respond with a Set-Cookie for the .checkout.google.com domain, in
order to mess with the integrity of that domain via cookie collisions).

BUG=none
TEST=none

Review URL: http://codereview.chromium.org/6529048

git-svn-id: de016e52bd170d2d4f2344f9bf92d50478b649e0@75231 0039d316-1c4b-4281-b951-d872f2087c98

gavinp/chromium,gavinp/chromium,adobe/chromium,ropik/chromium,ropik/chromium,gavinp/chromium,yitian134/chromium,Crystalnix/house-of-life-chromium,Crystalnix/house-of-life-chromium,adobe/chromium,Crystalnix/house-of-life-chromium,yitian134/chromium,yitian134/chromium,adobe/chromium,yitian134/chromium,Crystalnix/house-of-life-chromium,adobe/chromium,Crystalnix/house-of-life-chromium,adobe/chromium,gavinp/chromium,ropik/chromium,ropik/chromium,gavinp/chromium,yitian134/chromium,yitian134/chromium,adobe/chromium,ropik/chromium,adobe/chromium,ropik/chromium,Crystalnix/house-of-life-chromium,gavinp/chromium,adobe/chromium,adobe/chromium,gavinp/chromium,yitian134/chromium,adobe/chromium,gavinp/chromium,yitian134/chromium,Crystalnix/house-of-life-chromium,ropik/chromium,ropik/chromium,adobe/chromium,gavinp/chromium,Crystalnix/house-of-life-chromium,ropik/chromium,Crystalnix/house-of-life-chromium,Crystalnix/house-of-life-chromium,yitian134/chromium,gavinp/chromium,Crystalnix/house-of-life-chromium,yitian134/chromium