"server_tokens off" still showing server software

Igor Clark igor at pokelondon.com
Tue Mar 11 12:53:19 MSK 2008


On 10 Mar 2008, at 18:43, Igor Sysoev wrote:

> On Mon, Mar 10, 2008 at 06:20:15PM +0000, Igor Clark wrote:
>>
>
>> I hope this doesn't go against the whole nginx philosophy - I'm
>> normally quite proud about nginx server tokens!
>> But if it's either "do this or use Apache", then I'd rather do  
>> this ...
>
> The removing this code will not cause other problems.
> As to disabling Server header via configuration file, I do it only
> after Apache team does the same thing. I believe it will never be.

Thanks Igor. You're right about Apache too, of course - I thought its  
"ServerTokens" directive allowed "Off", but it seems I was wrong.

Best wishes
Igor

--
Igor Clark // POKE // 10 Redchurch Street // E2 7DD // +44 (0)20 7749  
5355 // www.pokelondon.com









More information about the nginx mailing list