How to hide the server version?
Paul
paul at gtcomm.net
Sat Jul 5 00:10:25 MSD 2008
These files contain the responses with the server name/type
src/http/ngx_http_special_response.c
src/http/ngx_http_header_filter_module.c
Marcos Neves wrote:
> Can you explain me why it´s not more secure?
>
> On Fri, Jul 4, 2008 at 4:28 PM, Almir Karic <almir at kiberpipa.org
> <mailto:almir at kiberpipa.org>> wrote:
>
> i have server_tokens off; and neither the headers nor the 404
> error
> page seem to contain the nginx version.
>
> FWIW, don't fool yourself that by not showing the version is any
> more secure than with the
> version displayed.
>
> On Fri, Jul 04, 2008 at 09:05:43PM +0200, Thomas wrote:
> > For hiding Nginx from error pages, do I need to tweak the source
> code
> > or is there an option somewhere for that?
> >
>
>
>
>
> --
> Marcos Neves
> +55 44 3263-8132
> +55 44 9918-8488
More information about the nginx
mailing list