Index | Thread | Search

From:
Tom Smyth <tom.smyth@wirelessconnect.eu>
Subject:
Re: httpd(8): patch to disable/modify the server banner
To:
ng2d68@proton.me, tech@openbsd.org
Date:
Wed, 29 Jan 2025 10:39:11 +0000

Download raw body.

Thread
Fwiw i think stuarts suggestion re syntax makes sense.. it is useful
to be able to remove the banner in httpd with out inserting relayd /
loadbalancers / reverse proxies into the equation

On Wed, 29 Jan 2025 at 10:35, Stuart Henderson <stu@spacehopper.org> wrote:
>
> I do see some use for disabling the header, but changing it from the
> default seems a bit of a niche feature for an http daemon that is
> intentionally quite barebones.
>
> (The original author would probably tell you to strip it in relayd..
> https://github.com/reyk/httpd/issues/39#issuecomment-103416671)
>
> > > +.It Oo Ic no Oc Ic disablebanner
> > > +Suppresses the server software name in HTTP headers and error documents
> > > +for the current
> > > +.Ic server.
> > > +The
> > > +.Ic no
> > > +keyword can be used to override the global setting.
>
> This syntax is awkward. If this _is_ added, it would be better as
> 'banner "foo"', 'no banner', and 'banner' (the latter for the case
> where you set 'no banner' globally and want to override to use
> the default string for a particular server).
>


-- 
Kindest regards,
Tom Smyth.