0

We often hide the ServerName / ServerSignature in the httpd.conf configuring to prevent server banner attack.

Should we keep it empty or displaying some name that doesn't give information about the server configuration? Example:

Server: ZGS 

This is what i see when i send a request to Zoho. Can we consider this as exposing server banner grabbing?

Milind Deore
  • 2,887
  • 5
  • 25
  • 40

0 Answers0