[sebsito]

I agree. Every anti-moronic default adds friction. I love that I can play with ES quickly via simple URL without any auth.

[oblio]

That's how we got PHP, Javascript, Visual Basic, MySQL (before version 5), Mongo.

You'd think that at some point we'd understand that there's way more morons out there than sensible people.

[rbanffy]

It can still bind to localhost or a local socket without auth.