Return-Path: Delivered-To: apmail-perl-dev-archive@www.apache.org Received: (qmail 2119 invoked from network); 6 Jan 2005 20:10:12 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 6 Jan 2005 20:10:12 -0000 Received: (qmail 99028 invoked by uid 500); 6 Jan 2005 20:10:11 -0000 Delivered-To: apmail-perl-dev-archive@perl.apache.org Received: (qmail 99013 invoked by uid 500); 6 Jan 2005 20:10:11 -0000 Mailing-List: contact dev-help@perl.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: list-post: Delivered-To: mailing list dev@perl.apache.org Received: (qmail 98998 invoked by uid 99); 6 Jan 2005 20:10:11 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (hermes.apache.org: local policy) Received: from secure.exclamationlabs.net (HELO secure.exclamationlabs.net) (66.77.29.165) by apache.org (qpsmtpd/0.28) with ESMTP; Thu, 06 Jan 2005 12:10:10 -0800 Received: from [192.168.2.160] (pcp0010804675pcs.walngs01.pa.comcast.net [69.142.163.148]) (authenticated (0 bits)) by secure.exclamationlabs.net (8.11.6/8.11.6) with ESMTP id j06KA7c29625; Thu, 6 Jan 2005 14:10:07 -0600 Message-ID: <41DD9B07.9050304@modperlcookbook.org> Date: Thu, 06 Jan 2005 15:09:43 -0500 From: Geoffrey Young User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040927 X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Philippe M. Chiasson" CC: dev@perl.apache.org Subject: Re: [Patch mp2] X-Powered-By References: <41DD99B4.5040909@ectoplasm.org> <41DD9AAD.3010409@modperlcookbook.org> In-Reply-To: <41DD9AAD.3010409@modperlcookbook.org> X-Enigmail-Version: 0.86.1.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Geoffrey Young wrote: > > Philippe M. Chiasson wrote: > >>Once again, a leaner cleaner way to implement our own X-Powered-By >>header ala >>PHP. (missing docs/tests) >> >>Thoughts on concept ? > > > +1 on concept actually, I would consider making it respect the value of ServerTokens, maybe only sending X-Powered-By it for a subset of available values for security (well obscurity) reasons. --Geoff --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@perl.apache.org For additional commands, e-mail: dev-help@perl.apache.org