{"action":"created","issue":{"url":"https://api.github.com/repos/wiremod/wire/issues/1009","labels_url":"https://api.github.com/repos/wiremod/wire/issues/1009/labels{/name}","comments_url":"https://api.github.com/repos/wiremod/wire/issues/1009/comments","events_url":"https://api.github.com/repos/wiremod/wire/issues/1009/events","html_url":"https://github.com/wiremod/wire/pull/1009","id":115432299,"number":1009,"title":"Disable HTTP by default","user":{"login":"immibis","id":507686,"avatar_url":"https://avatars.githubusercontent.com/u/507686?v=3","gravatar_id":"","url":"https://api.github.com/users/immibis","html_url":"https://github.com/immibis","followers_url":"https://api.github.com/users/immibis/followers","following_url":"https://api.github.com/users/immibis/following{/other_user}","gists_url":"https://api.github.com/users/immibis/gists{/gist_id}","starred_url":"https://api.github.com/users/immibis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/immibis/subscriptions","organizations_url":"https://api.github.com/users/immibis/orgs","repos_url":"https://api.github.com/users/immibis/repos","events_url":"https://api.github.com/users/immibis/events{/privacy}","received_events_url":"https://api.github.com/users/immibis/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/wiremod/wire/labels/E2","name":"E2","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":183,"created_at":"2015-11-06T04:36:17Z","updated_at":"2015-11-20T08:20:32Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/wiremod/wire/pulls/1009","html_url":"https://github.com/wiremod/wire/pull/1009","diff_url":"https://github.com/wiremod/wire/pull/1009.diff","patch_url":"https://github.com/wiremod/wire/pull/1009.patch"},"body":"Branching off from [this comment](#1007 (comment)), and according to the next comment Nebual agrees.\r\n\r\nNote: since this is a trivial change, I've made the change in the GitHub editor, and haven't actually tested it in-game."},"comment":{"url":"https://api.github.com/repos/wiremod/wire/issues/comments/158319440","html_url":"https://github.com/wiremod/wire/pull/1009#issuecomment-158319440","issue_url":"https://api.github.com/repos/wiremod/wire/issues/1009","id":158319440,"user":{"login":"SwadicalRag","id":10724598,"avatar_url":"https://avatars.githubusercontent.com/u/10724598?v=3","gravatar_id":"","url":"https://api.github.com/users/SwadicalRag","html_url":"https://github.com/SwadicalRag","followers_url":"https://api.github.com/users/SwadicalRag/followers","following_url":"https://api.github.com/users/SwadicalRag/following{/other_user}","gists_url":"https://api.github.com/users/SwadicalRag/gists{/gist_id}","starred_url":"https://api.github.com/users/SwadicalRag/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SwadicalRag/subscriptions","organizations_url":"https://api.github.com/users/SwadicalRag/orgs","repos_url":"https://api.github.com/users/SwadicalRag/repos","events_url":"https://api.github.com/users/SwadicalRag/events{/privacy}","received_events_url":"https://api.github.com/users/SwadicalRag/received_events","type":"User","site_admin":false},"created_at":"2015-11-20T08:20:32Z","updated_at":"2015-11-20T08:20:32Z","body":"@immibis, good administrators understand their players as well as they understand the server and its addons. Good administrators can make educated decisions about which E2 extensions can be enabled. Good administrators listen to their players' requests and respond accordingly.\r\n\r\nUnfortunately some administrators do not understand their server and the addons that they have installed. Some administrators do not know of the existence of players having free reign over serverside HTTP.\r\n\r\nDisabling the HTTP e2 extension by default would at least prompt players who are familiar with e2 to approach server administrators and ask them if the HTTP extension could be enabled. Administrators who outright ignore such requests are not good administrators. A good administrator would weigh the player's needs and the server's security accordingly and decide whether the e2 HTTP extension should be enabled.\r\n\r\nI wouldn't play on a server with bad administration. Playing on servers with bad administration only encourages more bad administration.\r\n\r\nServer owners who still disable HTTP after acknowledging the player's concerns only feel that HTTP is too much of a security risk to take to permit.\r\n\r\nServer owners who believe that an e2 extension that is disabled by default should stay disabled are still right, as they believe that they do not have enough information about the implications of players having free reign over server-side HTTP. So, the wire-team and its contributors make an informed decision on their behalf to disable such extensions by default.\r\n\r\nSo why is there an argument for keeping serverside-HTTP enabled by default?"}}