As default asp.net api project created by CLI have https enabled by default. Disabling it is simple if you do it correctly :). Nowadays all backends relay on some sort of WAF (web application firewall) to do the security tasks for you so there is less need to support https in our projects.
First you remove the:
from Startup.cs to remove the http -> https redirection
and than you remove the applicationUrl https reference from launchSettings.json