We often hide the ServerName
/ ServerSignature
in the httpd.conf
configuring to prevent server banner attack.
Should we keep it empty or displaying some name that doesn't give information about the server configuration? Example:
Server: ZGS
This is what i see when i send a request to Zoho. Can we consider this as exposing server banner grabbing?