HTTP/2 is vulnerable, and it's possible that attack tools are being built right now. Here's how you can secure your Web servers against possible attacks.