Index | Thread | Search

From:
Stuart Henderson <stu@spacehopper.org>
Subject:
Re: httpd(8): patch to disable/modify the server banner
To:
ng2d68@proton.me, tech@openbsd.org
Date:
Wed, 29 Jan 2025 10:32:59 +0000

Download raw body.

Thread
I do see some use for disabling the header, but changing it from the
default seems a bit of a niche feature for an http daemon that is
intentionally quite barebones.

(The original author would probably tell you to strip it in relayd..
https://github.com/reyk/httpd/issues/39#issuecomment-103416671)

> > +.It Oo Ic no Oc Ic disablebanner
> > +Suppresses the server software name in HTTP headers and error documents
> > +for the current
> > +.Ic server.
> > +The
> > +.Ic no
> > +keyword can be used to override the global setting.

This syntax is awkward. If this _is_ added, it would be better as
'banner "foo"', 'no banner', and 'banner' (the latter for the case
where you set 'no banner' globally and want to override to use
the default string for a particular server).