Remove (Device)PostQuantumKeyAgreementEnabled admin policy [chromium/src : main]

0 views
Skip to first unread message

David Benjamin (Gerrit)

unread,
Feb 20, 2026, 3:13:48 PM (18 hours ago) Feb 20
to Enterprise Policy Reviews, chromium...@chromium.org, net-r...@chromium.org, vsavu...@google.com, ipc-securi...@chromium.org, network-ser...@chromium.org

David Benjamin has uploaded the change for review

Commit message

Remove (Device)PostQuantumKeyAgreementEnabled admin policy

As documented in the policy, and in enterprise release notes[*], the
temporary admin policy to disable post-quantum protections was to be
removed after Chrome 145. The main branch is now Chrome 147, so remove
this.

[*] https://support.google.com/chrome/a/answer/7679408#:~:text=Chrome%20146%20on%20Linux%2C%20MacOS%2C%20Windows%3A%20Enterprise%20policy%20will%20be%20removed.%C2%A0
Bug: 40910498
Change-Id: I5fa1107741119b3e5f7057057c28fe45cadf37d8

Change diff


Change information

Files:
  • M chrome/browser/ash/policy/core/device_policy_decoder.cc
  • M chrome/browser/ash/policy/core/device_policy_decoder_unittest.cc
  • M chrome/browser/policy/configuration_policy_handler_list_factory.cc
  • M chrome/browser/policy/policy_network_browsertest.cc
  • M chrome/browser/ssl/ssl_config_service_manager.cc
  • M chrome/browser/ssl/ssl_config_service_manager.h
  • M chrome/common/pref_names.h
  • M components/policy/proto/chrome_device_policy.proto
  • M components/policy/resources/templates/policy_definitions/CryptographyCompliance/DeviceLoginScreenPreferSlowKexAlgorithms.yaml
  • M components/policy/resources/templates/policy_definitions/CryptographyCompliance/PreferSlowKexAlgorithms.yaml
  • M components/policy/resources/templates/policy_definitions/Miscellaneous/DevicePostQuantumKeyAgreementEnabled.yaml
  • M components/policy/resources/templates/policy_definitions/Miscellaneous/PostQuantumKeyAgreementEnabled.yaml
  • M components/policy/test/data/pref_mapping/DevicePostQuantumKeyAgreementEnabled.json
  • M components/policy/test/data/pref_mapping/PostQuantumKeyAgreementEnabled.json
  • M net/quic/quic_end_to_end_unittest.cc
  • M net/socket/ssl_client_socket_unittest.cc
  • M net/ssl/ssl_config_service.cc
  • M net/ssl/ssl_config_service.h
  • M services/network/public/mojom/ssl_config.mojom
  • M services/network/ssl_config_service_mojo_unittest.cc
  • M services/network/ssl_config_type_converter.cc
Change size: L
Delta: 21 files changed, 13 insertions(+), 373 deletions(-)
Open in Gerrit

Related details

Attention set is empty
Submit Requirements:
  • requirement satisfiedCode-Coverage
  • requirement is not satisfiedCode-Owners
  • requirement is not satisfiedCode-Review
  • requirement is not satisfiedReview-Enforcement
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: newchange
Gerrit-Project: chromium/src
Gerrit-Branch: main
Gerrit-Change-Id: I5fa1107741119b3e5f7057057c28fe45cadf37d8
Gerrit-Change-Number: 7596102
Gerrit-PatchSet: 1
Gerrit-Owner: David Benjamin <davi...@chromium.org>
Gerrit-CC: Enterprise Policy Reviews <enterprise-p...@google.com>
satisfied_requirement
unsatisfied_requirement
open
diffy

gwsq (Gerrit)

unread,
8:57 AM (16 minutes ago) 8:57 AM
to David Benjamin, Victor Gabriel Savu, Enterprise Policy Reviews, Chromium IPC Reviews, Giovanni Ortuno Urquidi, Tsuyoshi Horo, Carlos IL, Pavol Marko, Chromium LUCI CQ, chromium...@chromium.org, ipc-securi...@chromium.org, net-r...@chromium.org, network-ser...@chromium.org, vsavu...@google.com
Attention needed from Carlos IL, Giovanni Ortuno Urquidi, Pavol Marko and Tsuyoshi Horo

Message from gwsq

From chrome/enterprise/gwsq/enterprise-policy-review.gwsq:
New rules apply to adding device policies. go/device-policy-generation-future-proofing
From googleclient/chrome/chromium_gwsq/ipc/config.gwsq:
IPC: ort...@chromium.org

📎 It looks like you’re making a possibly security-sensitive change! 📎 IPC security review isn’t a rubberstamp, so your friendly security reviewer will need a fair amount of context to review your CL effectively. Please review your CL description and code comments to make sure they provide context for someone unfamiliar with your project/area. Pay special attention to where data comes from and which processes it flows between (and their privilege levels). Feel free to point your security reviewer at design docs, bugs, or other links if you can’t reasonably make a self-contained CL description. (Also see https://cbea.ms/git-commit/).

IPC reviewer(s): ort...@chromium.org


Reviewer source(s):
pma...@chromium.org is from context(chrome/enterprise/gwsq/enterprise-policy-review.gwsq)
ort...@chromium.org is from context(googleclient/chrome/chromium_gwsq/ipc/config.gwsq)

Open in Gerrit

Related details

Attention is currently required from:
  • Carlos IL
  • Giovanni Ortuno Urquidi
  • Pavol Marko
  • Tsuyoshi Horo
Submit Requirements:
  • requirement satisfiedCode-Coverage
  • requirement is not satisfiedCode-Owners
  • requirement is not satisfiedCode-Review
  • requirement is not satisfiedReview-Enforcement
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: comment
Gerrit-Project: chromium/src
Gerrit-Branch: main
Gerrit-Change-Id: I5fa1107741119b3e5f7057057c28fe45cadf37d8
Gerrit-Change-Number: 7596102
Gerrit-PatchSet: 3
Gerrit-Owner: David Benjamin <davi...@chromium.org>
Gerrit-Reviewer: Carlos IL <carl...@chromium.org>
Gerrit-Reviewer: David Benjamin <davi...@chromium.org>
Gerrit-Reviewer: Giovanni Ortuno Urquidi <ort...@chromium.org>
Gerrit-Reviewer: Pavol Marko <pma...@chromium.org>
Gerrit-Reviewer: Tsuyoshi Horo <ho...@chromium.org>
Gerrit-CC: Chromium IPC Reviews <chrome-ip...@google.com>
Gerrit-CC: Enterprise Policy Reviews <enterprise-p...@google.com>
Gerrit-CC: Victor Gabriel Savu <vs...@google.com>
Gerrit-CC: gwsq
Gerrit-Attention: Tsuyoshi Horo <ho...@chromium.org>
Gerrit-Attention: Carlos IL <carl...@chromium.org>
Gerrit-Attention: Pavol Marko <pma...@chromium.org>
Gerrit-Attention: Giovanni Ortuno Urquidi <ort...@chromium.org>
Gerrit-Comment-Date: Sat, 21 Feb 2026 13:57:25 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: No
satisfied_requirement
unsatisfied_requirement
open
diffy
Reply all
Reply to author
Forward
0 new messages