Index | Thread | Search

From:
"H. Hartzer" <h@hartzer.sh>
Subject:
Re: (return of) the httpd banner suppressing patch
To:
"Lloyd" <ng2d68@proton.me>, "tech@openbsd.org" <tech@openbsd.org>
Date:
Tue, 13 May 2025 17:22:44 +0000

Download raw body.

Thread
Lloyd wrote:
> Patch has been freshly retested against OpenBSD 7.7:
>
> 1. Adds a "[no] banner" directive to the global and server sections
> of httpd.conf to selectively suppress the "Server:" HTTP header and
> tokens in the error documents
>
> 2. Fixes a bug in debugging output introduced in a previous merge
>
> 3. Fixes a formatting nit in existing code
>
> 4. Relevant updates to man page documentation

Hi Lloyd,

Not that what I say has any weight, but I wanted to say that I read
through the patch and couldn't find any obvious issues. I think it looks
like a solid patch.

I think it'd also be nice to be able to not send the Date header in some
instances, but that's a different and perhaps more controversial matter.

-Henrich