But what if I change my token to an apache2 version?<br>How can somebody found that itīs nginx, and not apache, cherokee, lighttpd or any other server?<br><br><div class="gmail_quote">On Fri, Jul 4, 2008 at 4:52 PM, Alan Williamson <<a href="mailto:alan@blog-city.com">alan@blog-city.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="Ih2E3d">Marcos Neves wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Can you explain me why itīs not more secure?<br>
</blockquote>
<br></div>
because if someone is really that keen to attack you, they can quickly figure out which version you are running by running through a number of permutations, since nginx has only a limited version history.<br>
<br>
by process of elimination the would-be hacker would soon realise which version they would be trying to get into .<br><font color="#888888">
<br>
-- <br>
Alan Williamson<br>
Registrationless email/sms reminders: <a href="http://yourli.st/" target="_blank">http://yourli.st/</a><br>
blog: <a href="http://alan.blog-city.com/" target="_blank">http://alan.blog-city.com/</a><br>
<br>
</font></blockquote></div><br><br clear="all"><br>-- <br>Marcos Neves<br>+55 44 3263-8132<br>+55 44 9918-8488