Disable https by default ...

https is the only way to open the WebInterface decently secure, so it might already be opened (or forwarded) to the E2 box when doing a re-installation or "factory" reset.

However, right after a fresh install E2 doesn't have proper key/certs yet, probably also a simple default password and on some distros not even that (Reverting "auth=true" default).
Thus it's better to disable https entirely for these scenarios until the user had a chance to configure it completely.

Pure intranet-only use on the other side doesn't really require https at all.