commit 2937efc4b3cd071db278cbbe3c47c67d8567ec74
author davidben <davidben@chromium.org> Mon Oct 26 00:56:18 2015
committer Commit bot <commit-bot@chromium.org> Mon Oct 26 00:57:35 2015
tree 131f24b36b345a3f9a1a9adca8e2a16d87a27a89
parent 6fdc6d5c6a5bf5d9e028143a42f99f5977c1acd1

IsSecureTLSCipherSuite should not classify DHE_RSA as secure.

This makes the requirements for 'modern' ECDHE + AEAD, rather than PFS + AEAD.
Given that we'd been hoping to ditch DHE for a while, we should at least get it
out of the modern bucket.

The HTTP/2 requirements stay the same since those are snapshotted into the spec
already. Though early data says that no one uses HTTP/2 with DHE_RSA, which is
good for removal prospects.

BUG=538690

Review URL: https://codereview.chromium.org/1405383003

Cr-Commit-Position: refs/heads/master@{#356000}