The server should not be able to ask beyond the protocols of the request. The client says this is what I need, the server responds in that form if it can. The s

The server should not be able to ask beyond the protocols of the request. The client says this is what I need, the server responds in that form if it can. The server is not supposed to send a script inspecting the client for more details. If the server can run a script to analyze what plugins you're running, what else can it take? Exfiltration of arbitrary data is not something that is OK. You can't force a server to serve, nor should you force a client to give more information than is necessary to serve the request. Anything else is no longer technology, it's adversarial and now we're in a Prisoner's Dilemma.