How to hide the server version?
Thomas Seifert
thomas-lists at mysnip.de
Mon May 12 21:47:28 MSD 2008
Hi Guys,
is there any directive to hide the exact server version in the header
and error pages?
I don't mind showing that I'm running nginx but I don't want to give out
the exact version it is.
It could give attackers additional information if the update is lacking
a version or something like that.
I know, security by obscurity isn't working well but at least its a
stumbling block.
Regards,
thomas
More information about the nginx
mailing list