Index | Thread | Search

From:
Rafael Sadowski <rafael@sizeofvoid.org>
Subject:
Re: add custom HTTP header support to httpd
To:
Lloyd <ng2d68@proton.me>
Cc:
"Kirill A. Korinsky" <kirill@korins.ky>, tech@openbsd.org
Date:
Mon, 12 Jan 2026 13:31:24 +0100

Download raw body.

Thread
On Tue Dec 30, 2025 at 05:31:07AM +0000, Lloyd wrote:
> Kirill A. Korinsky wrote:
> 
> > 
> > I hadn't yet tested it, but I will, anyway it reads good and it triggers the
> > first feedback: shall we backout "no banner" commit?
> > 
> > It seems that header hide should be enough to make it in general way.
> > 
> 
> Server header is kind of a special case.
> 
> The 'no banner' directive doesn't simply delete the Server header.
> 
> It also hides the servername in the errdocs (while leaving fcgi params
> untouched, for RFC compliance).
> 

I agree, we should ignore "header hide Server" and display a warning
such as "'header hide Server' ignored, use 'no banner' instead".