Use:<br>server_tokens off;<br><br>From:<br><a href="http://wiki.codemongers.com/NginxHttpHeadersModule">http://wiki.codemongers.com/NginxHttpHeadersModule</a><br><br>I believe this setting was added in version <a href="http://0.5.34.">0.5.34.</a><br>
<br>>j.<br><br><div class="gmail_quote">On Mon, May 12, 2008 at 10:47 AM, Thomas Seifert <<a href="mailto:thomas-lists@mysnip.de">thomas-lists@mysnip.de</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi Guys,<br>
<br>
is there any directive to hide the exact server version in the header and error pages?<br>
I don't mind showing that I'm running nginx but I don't want to give out the exact version it is.<br>
It could give attackers additional information if the update is lacking a version or something like that.<br>
<br>
I know, security by obscurity isn't working well but at least its a stumbling block.<br>
<br>
<br>
Regards,<br><font color="#888888">
<br>
thomas<br>
<br>
</font></blockquote></div><br>