Re: Diff to add ServerTokens to the httpd.conf and change the default to ProductOnly

#1 (**permalink**) 02-22-2008, 12:04 PM

On Mon, Jan 23, 2006 at 08:41:35PM +0100, Sebastian Rother wrote:
> On Mon, 23 Jan 2006 13:20:24 -0600
> Marco Peereboom <slash@peereboom.us> wrote:
>
> > Maybe you could use it as a learning experience on how not to interact with
> > others.
> >
> > On Mon, Jan 23, 2006 at 06:17:15PM +0000, Thorsten Glaser wrote:
> > > Marco Peereboom dixit:
> > >
> > > >How about "we'll just ignore what you want because it's you".
> > >
> > > It would neither be the first time, nor the first person,
> > > where you're doing it.
> > >
> > > tg@odem:/home/tg $ print HEAD / HTTP/1.0\\n | nc ::1 80
> > > HTTP/1.1 200 OK
> > > Date: Mon, 23 Jan 2006 18:17:05 GMT
> > > Server: httpd/3.30A (Unix)
>
> I didn't thought about netcraft but about vuln-scanns wich are made
> because of the version number of apache.
> This was just a idea how to reduce such stuff wich belongs to the
> versionnumber in the banner.
> Nothing more...
>
> And you don't have to adapt "ProductOnly" but adapting the section
> would be usefull (like ServerSignature..) in my oppinion.
>
> Kind regards,
> Sebastian

That is not a very good reason for proposing the patch.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode