HTTP/2 won't stop anything. Encryption is not mandatory. Even if it were, browsers are going to be defaulting to HTTP 1.x on port 80 for perhaps a decade. Trans

HTTP/2 won't stop anything. Encryption is not mandatory. Even if it were, browsers are going to be defaulting to HTTP 1.x on port 80 for perhaps a decade. Transparent proxying and downgrade attacks are still totally feasible. Just like every other step in Internet history, user security and privacy has been kicked to the curb.