On 2001.10.20, Jim Wilcoxson <[EMAIL PROTECTED]> wrote:
> I think all sites should remove the Server: header.  It's only usefulness
> I can see is for stats and to help people attack a site more efficiently.
> It'll be off ours soon (for the latter reason).

Security through obscurity, huh?

People can "TCP fingerprint" different operating systems by
properties of their IP stacks.  Don't tempt me to create a
program that fingerprints webservers.  ;-)

-- Dossy

--
Dossy Shiobara                       mail: [EMAIL PROTECTED]
Panoptic Computer Network             web: http://www.panoptic.com/
  "He realized the fastest way to change is to laugh at your own
    folly -- then you can let go and quickly move on." (p. 70)

Reply via email to