Brass, Phil (ISS Atlanta) wrote:
> Hi, I recently patched my debian apache server source to add a new
> ServerToken value, ServerToken=Hide, which will remove the Server, Date,
> and Last-Modified headers (to make server identification a little more
> difficult (yes I know this is bad for proxies, if that's a big deal we
> can just have it remove the Server: header, that's probably all most
> people would expect anyway)).
I'm curious - what benefit would be had by stripping Date and Last-Modified?
Does Apache not already have an override for the Server value?
Regards,
Graham
--
-----------------------------------------
minfrin@sharp.fm "There's a moon
over Bourbon Street
tonight..."
|