Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Date: Sat, 30 Mar 2002 20:46:01 -0500 (Eastern Standard Time)
From: Joshua Slive <joshua@slive.ca>
To: Apache <users@httpd.apache.org>
Subject: Re: Recompiling considerations...
In-Reply-To: <Pine.LNX.4.33.0203301816550.11726-100000@rhiannon.rcbowen.com>
Message-ID: <Pine.WNT.4.33.0203302042510.-1759563-100000@jgcomputer>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII


On Sat, 30 Mar 2002, Rich Bowen wrote:
> > Also I want to make changes to the file that is now httpd.h, before I
> > install so that the name of the Apache server's banner is not displayed,
> > but rather a banner I define. Any ideas?
>
> Not sure what you are asking here. If you want to change that string to
> something else, then change it. Are you having trouble doing this? Am I
> missing something?

Nice to see you hanging around here, Rich.

I know I should just keep my mouth shut, but since the issue of changing
the Server HTTP header has come up a couple times in the recent past, let
me just point something out:

I don't care what your "security expert" tells you, changing that header
is a waste of time.  It is like pasting a "Pinto" lable over the bumber of
your Lexus and thinking it will stop people from stealing your car.  Your
time is much better spent learning about more general security issues on
the web.

Joshua.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org