3 ms·
IIRC it's generally a bad practice if your HTTP responses reveal what your tech stack looks like. Not great for security.
by jasonhansel 8y ago
IIRC it's generally a bad practice if your HTTP responses reveal what your tech stack looks like. Not great for security.
- SpiffyMelon 8y agoThere are plenty of other ways to fingerprint an HTTP server other than relying on a customisable `Server` header. Security through obscurity won't help you when someone actually wants to know which server you're using.
- gtirloni 8y agoSecurity only through obscurity won't help you much, yes. No need to make things any easier though.
- jasonhansel 8y agoExactly. Why take an unnecessary risk?