Two first-gen flaws carried over to HTTP/2, warn security bods • The Register

http://www.theregister.co.uk/2016/08/03/http2_flaws/