Do not use HTTP/2 without adequate security.

net/socket/nss_ssl_util.cc

Index: net/socket/nss_ssl_util.cc
diff --git a/net/socket/nss_ssl_util.cc b/net/socket/nss_ssl_util.cc
index a238a25d2d4be95623fead070880556aa2c7aa64..f8630f1c9d7b057c25d5492545510a10b5165888 100644
--- a/net/socket/nss_ssl_util.cc
+++ b/net/socket/nss_ssl_util.cc
@@ -135,6 +135,8 @@ class NSSSSLInitSingleton {
           enabled = true;
         }
         SSL_CipherPrefSetDefault(ssl_ciphers[i], enabled);
+        if (enabled)
+          enabled_cipher_suites_.push_back(static_cast<uint16>(ssl_ciphers[i]));
       }
     }
 
@@ -205,6 +207,8 @@ class NSSSSLInitSingleton {
       PR_Close(model_fd_);
   }
 
+  std::vector<uint16> enabled_cipher_suites_;
+
  private:
   PRFileDesc* model_fd_;
 };
@@ -231,6 +235,10 @@ PRFileDesc* GetNSSModelSocket() {
   return g_nss_ssl_init_singleton.Get().GetModelSocket();
 }
 
+const std::vector<uint16>& GetNSSEnabledCipherSuites() {
+  return g_nss_ssl_init_singleton.Get().enabled_cipher_suites_;
+}
+
 // Map a Chromium net error code to an NSS error code.
 // See _MD_unix_map_default_error in the NSS source
 // tree for inspiration.