Currently SPDY/3.1 is disabled by default but can be enabled via field trials. SPDY/3.1 should be entirely removed, and dead methods, members, enums, comments, histograms etc. cleaned up.
third_party/zlib/mixed-source.patch is specifically for mitigating SPDY/3.1 header compression security vulnerability, see issue 139744 . After SPDY/3.1 is removed, that file can be removed (and possibly other changes from https://crrev.com/10837057 can be reverted?).
Comment 1 by bugdroid1@chromium.org
, Jul 8 2016