Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Received-SPF: neutral (herse.apache.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: AW: vote on concept of ServerTokens Off
Date: Wed, 6 Dec 2006 15:57:20 +0100
Message-ID: 
 <3B21A253728EA247A10A692547A271530E7447@EITO-MBX03.internal.vodafone.com>
In-Reply-To: <20061206145015.GH3539@cr>
Thread-Topic: vote on concept of ServerTokens Off
Thread-Index: AccZRf9FBOWxBO6yQ9+HDDWqNO9gCAAADefQ
From: =?iso-8859-1?Q?Pl=FCm=2C_R=FCdiger=2C_VF_EITO?=
 <ruediger.pluem@vodafone.com>
To: <dev@httpd.apache.org>


> -----Urspr=FCngliche Nachricht-----
> Von: Mads Toftum=20
> Gesendet: Mittwoch, 6. Dezember 2006 15:50
> An: dev@httpd.apache.org
> Betreff: Re: vote on concept of ServerTokens Off
>=20
>=20
> On Wed, Dec 06, 2006 at 03:45:54PM +0100, Lars Eilebrecht wrote:
> > So, is that a -1 or -0?
> >=20
> A peanut gallery -1. I feel very strongly about pretending to=20
> implement
> security measures that does not help one bit.

The original motivation is not about security but about amount of data
as every single byte transmitted has to be paid).
FWIW I think that saving about 20 bytes in the HTTP headers
does not solve your cost problem. Usually you can save much more with
other measures like mod_deflate or tidying your output.


Regards

R=FCdiger