Do not use HTTP/2 without adequate security.

net/socket/nss_ssl_util.cc

Index: net/socket/nss_ssl_util.cc
diff --git a/net/socket/nss_ssl_util.cc b/net/socket/nss_ssl_util.cc
index a238a25d2d4be95623fead070880556aa2c7aa64..a18402a06981d588dc136971e0680c375f96e4b9 100644
--- a/net/socket/nss_ssl_util.cc
+++ b/net/socket/nss_ssl_util.cc
@@ -135,6 +135,10 @@ class NSSSSLInitSingleton {
           enabled = true;
         }
         SSL_CipherPrefSetDefault(ssl_ciphers[i], enabled);
+        if (enabled) {
+          default_enabled_cipher_suites_.push_back(
+              static_cast<uint16>(ssl_ciphers[i]));
+        }
       }
     }
 
@@ -205,6 +209,8 @@ class NSSSSLInitSingleton {
       PR_Close(model_fd_);
   }
 
+  std::vector<uint16> default_enabled_cipher_suites_;
+
  private:
   PRFileDesc* model_fd_;
 };
@@ -231,6 +237,10 @@ PRFileDesc* GetNSSModelSocket() {
   return g_nss_ssl_init_singleton.Get().GetModelSocket();
 }
 
+const std::vector<uint16>& GetNSSDefaultEnabledCipherSuites() {
+  return g_nss_ssl_init_singleton.Get().default_enabled_cipher_suites_;
+}
+
 // Map a Chromium net error code to an NSS error code.
 // See _MD_unix_map_default_error in the NSS source
 // tree for inspiration.