Consider removing Server header
zachmullen opened this issue · 0 comments
zachmullen commented
For a production install, returning a Server
header that includes the exact software and version being used is considered by many to be a security bug. This role currently includes such a header, in my case it shows Server: nginx/1.14.0 (Ubuntu)
. My vote would be to remove this entirely in prod.