On Tue, Jan 13, 2004 at 08:53:38AM -0500, Jim Jagielski wrote: > I'd like to get some sort of feedback concerning the idea > of having ServerTokens not only "adjust" what Apache > sends in the Server header, but also allow the directive > to fully set that info. > > For example: ServerTokens Set Aporche/3.5 > would cause Apache to send Aporche/3.5 as the > Server header. Some people want to be able to "totally" > obscure the server type.
I must say that I'm no fan of making such a change - why should we help people do that? To quote the FAQ - This is not advised, as it is almost certain not to provide you with the added security you think that you are gaining. The exact method of doing this is left as an exercise for the reader, as we are not keen on helping you do something that is intrinsically a bad idea. I agree with the faq - there is no good reason to change that, so let's not help. vh Mads Toftum -- `Darn it, who spiked my coffee with water?!' - lwall
