OT, but you can see one here:
http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-44ver2.pdf
(specifically, section 5.1: Reconfigure HTTP service banner (and others as
required) not to report Web server and OS type and version )
There are, of course, mandates to use up to date software, but, also many
other suggestions. Some practical, some just weird.
--Matt
On Sat, Dec 16, 2017 at 3:35 AM, Branko Čibej <brane_at_apache.org> wrote:
> On 15.12.2017 20:10, Matt Simmons wrote:
> > Many documents relating to information security compliance require
> > blocking visible software version information.
>
> Interesting documents. I'd have expected them to require all software to
> be patched to fix all known security bugs. I thought the "security by
> obscurity" mantra had been debunked, but apparently not ...
>
> -- Brane
>
> > On Fri, Dec 15, 2017 at 10:46 AM Nico Kadel-Garcia <nkadel_at_gmail.com
> > <mailto:nkadel_at_gmail.com>> wrote:
> >
> > Why would you want to hide this?
> >
> > On Fri, Dec 15, 2017 at 10:54 AM, Dave Huang <khym_at_azeotrope.org
> > <mailto:khym_at_azeotrope.org>> wrote:
> > > On Dec 15, 2017, at 9:15, Dhanushka Parakrama
> > <parakrama1282_at_gmail.com <mailto:parakrama1282_at_gmail.com>>
> > > wrote:
> > >
> > >
> > > Hi All
> > >
> > > Is there any configuration where i can hide the subversion
> > version details
> > > .Please see copied image <image.png>
> >
> > --
> > "Today, vegetables... Tomorrow, the world!"
>
>
--
"Today, vegetables... Tomorrow, the world!"
Received on 2017-12-16 14:13:49 CET