Don't set MODE_DEFAULT when adding HPKP header.

net/http/transport_security_state.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_TRANSPORT_SECURITY_STATE_H_
 #define NET_HTTP_TRANSPORT_SECURITY_STATE_H_
 
 #include <map>
 #include <string>
 #include <utility>
@@ skipping 90 matching lines @@
     //
     // Static entries do not have a created time.
     base::Time created;
 
     // The absolute time (UTC) when the |upgrade_mode|, if set to
     // UPGRADE_ALWAYS, downgrades to UPGRADE_NEVER.
     base::Time upgrade_expiry;
 
     // Are subdomains subject to this DomainState?
     //
-    // TODO(palmer): Decide if we should have separate |pin_subdomains| and
-    // |upgrade_subdomains|. Alternately, and perhaps better, is to separate
-    // DomainState into UpgradeState and PinState (requiring also changing the
-    // serialization format?).
+    // TODO(palmer): We need to have separate |pin_subdomains| and
+    // |upgrade_subdomains|. Trevor Perrin is working on a new storage model
+    // that will enable this.
     bool include_subdomains;
 
     // Optional; hashes of static pinned SubjectPublicKeyInfos. Unless both
     // are empty, at least one of |static_spki_hashes| and
     // |dynamic_spki_hashes| MUST intersect with the set of SPKIs in the TLS
     // server's certificate chain.
     //
     // |dynamic_spki_hashes| take precedence over |static_spki_hashes|.
     // That is, |IsChainOfPublicKeysPermitted| first checks dynamic pins and
     // then checks static pins.
@@ skipping 191 matching lines @@
   DomainStateMap forced_hosts_;
 
   Delegate* delegate_;
 
   DISALLOW_COPY_AND_ASSIGN(TransportSecurityState);
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_TRANSPORT_SECURITY_STATE_H_