httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Eli Marmor <mar...@netmask.it>
Subject Re: [PATCH 40026] ServerTokens Off
Date Sat, 12 Aug 2006 19:22:46 GMT
Sorry for joining the discussion so lately.

This issue was raised several times in this list.

It was voted off in all of them, because of several reasons, one of
them was not mentioned this time:

Apache's strongest marketing point has been always its dominance among
the web servers. With about 70% in all of the market researches, from
netcraft.co.uk to securityspace.com, Apache became the first option for
almost everybody.

It's sure that the "Off" option will hurt the statistics of Apache.

Many of us will love to see this option going away, because everybody
can do it very easily through the source code, as "Yahoo!" and others
already did.

But if this option is a so strong dream for somebody, the minimum that
can be done to help a little, is a strong recommendation against using
this option, in the documentation.

My English is not great, so I leave the exact words for somebody else,
but this recommendation should say that using the Off option is not
social, pays bad for the great efforts that Apache's developers put
into this project, and should be used only in closed networks or if
there is no other choice. Something like "use it only if you know what
you are doing". After all, people don't pay anything for the great
efforts of the Apache's developers, and crediting Apache is the only
nominal "thank" that they can do.

Of course, the statistics of Apache is going to suffer even with this
warning, but without it - it is going to be even worse.

I also think that adding this option requires a new license (2.1?)
stating that "You" must mention Apache in this HTTP header, so
technically it will be possible to use Off, but not according to the
license.

-- 
Eli Marmor
marmor@netmask.it
Netmask (El-Mar) Internet Technologies Ltd.
__________________________________________________________
Tel.:   +972-9-766-1020          8 Yad-Harutzim St.
Fax.:   +972-9-766-1314          P.O.B. 7004
Mobile: +972-50-5237338          Kfar-Saba 44641, Israel

Mime
View raw message