3 ms·
Even if used in production, isn't hiding the headers security through obscurity?
by heidar 14y ago
Even if used in production, isn't hiding the headers security through obscurity?
- mnarayan01 14y agoPrecise version information (in production) is probably not a good idea; obscuring the fact that you're insecure has obvious upsides.
- garethadams 14y agoMaybe you should present headers from some older, more insecure server? Then any script using the Server headers to target specific vulnerabilities will be completely foiled!