Matthew J. Dovey wrote:
> I can see that this would be useful for debugging purposes - however:
>
>
> a) this must always be optional rather than mandatory, as
> software/version identifiers in services are often used by hackers
> either to target known vulnerabilities in the software, or in
> fingerprinting the system (so something identifying itself as "Tom
> Habing .Net Server" gives a good hint that the server is Windows
> based). SRW/U may not be as mainstream as Apache httpd, IIS etc. but
> even so.
Hey, why are you picking on me? :-)
Tom Habing
|