Hi, what the difference with no header and Header = "Server: Apache" without version with "prod" args of servertoken... if is to hide apache version only there no need to modify ServerToken directive... if is to hide apache completly ok...it's other problem...
but a security level i'm not sure they add serius difference... and for the notoriety of apache vs other web server is very importante to have statistic... beceause enterprise make disision to use opensource on the fact who are wheel known and used... and statistic is the most powerfull way to acheve this... Best Regards, Mathieu
