W3C home > Mailing lists > Public > www-talk@w3.org > September to October 2006

Re: https without ssl

From: Tom Molesworth <tetra604@gmail.com>
Date: Fri, 29 Sep 2006 17:42:29 +0100
Message-ID: <6c93a9d90609290942p53828c1cn96970cd1bb6885b7@mail.gmail.com>
To: "Diallo, Pathe" <Pathe.Diallo@experianscorex.com>
Cc: www-talk@w3.org

hi there,

On 9/29/06, Diallo, Pathe <Pathe.Diallo@experianscorex.com> wrote:
> How can I disable the HTTP Header, or Customize it so it won't display
>
> Server:Apache
>
> I used:
> ServerTokens Prod
>
> I would like to be able to not display the Server name at all, or change
> it to a generic message

Apache core doesn't provide this, so try mod_security instead:

http://www.modsecurity.org/

particularly the SecServerSignature directive:

http://www.modsecurity.org/documentation/modsecurity-apache/1.9.3/html-multipage/06-special_features.html#N108B5
Received on Friday, 29 September 2006 16:42:34 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Wednesday, 27 October 2010 18:14:29 GMT