Revert 138795 - Revert "nss: revert encrypted and origin bound certificates support."

net/base/transport_security_state_static.json

Index: net/base/transport_security_state_static.json
===================================================================
--- net/base/transport_security_state_static.json	(revision 138795)
+++ net/base/transport_security_state_static.json	(working copy)
@@ -123,6 +123,13 @@
         "UTNUSERFirstObject",
         "GTECyberTrustGlobalRoot"
       ]
+    },
+    {
+      "name": "tor2web",
+      "static_spki_hashes": [
+        "AlphaSSL_G2",
+        "Tor2web"
+      ]
     }
   ],
 
@@ -259,6 +266,7 @@
     { "name": "braintreepayments.com", "mode": "force-https" },
     { "name": "www.braintreepayments.com", "mode": "force-https" },
     { "name": "emailprivacytester.com", "mode": "force-https" },
+    { "name": "tor2web.org", "include_subdomains": true, "pins": "tor2web" },
 
     // Entries that are only valid if the client supports SNI.
     { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": true },