/u/biot's analogy is apt. But I don't understand why it isn't a defence that the HTTP protocol starts with a REQUEST . The server is the one who actually serves up the information.
If I _request_ something from you ("hey, can I borrow your car?"), and you give it to me, then what's the problem here?
If I _request_ something from you ("hey, can I borrow your car?"), and you give it to me, then what's the problem here?