расскаже бабе боне, http2 как протокол сам по себе работает поверх ssl .
ничего хорошего из http2 без ssl невыйдет
Although the standard itself does not require usage of encryption,[36] all major client implementations (Firefox,[37] Chrome, Safari, Opera, IE, Edge) have stated that they will only support HTTP/2 over TLS, which makes encryption de facto mandatory.[38]