How to hide the server version?

Thomas Seifert thomas-lists at mysnip.de
Mon May 12 21:47:28 MSD 2008


Hi Guys,

is there any directive to hide the exact server version in the header 
and error pages?
I don't mind showing that I'm running nginx but I don't want to give out 
the exact version it is.
It could give attackers additional information if the update is lacking 
a version or something like that.

I know, security by obscurity isn't working well but at least its a 
stumbling block.


Regards,

thomas





More information about the nginx mailing list