up vote 0 down vote favorite
share [g+] share [fb]

I cannot remove the "Server" header from the response headers. I am using Amazon EC2. I have added this in Apache config:

ServerSignature Off Header unset Server RequestHeader unset Server

It does not do anything. I can still see the server header saying "Apache (Amazon)" in the response headers. Any clue?

link|improve this question
Did you restart Apache? – ceejayoz Jul 8 '11 at 19:20
Yes I have several times – Jat Jul 8 '11 at 19:39
feedback

1 Answer

up vote 3 down vote

You can not unset the Server response header. Though, it is not required by HTTP RFC, the Apache httpd developers are not in favor of allowing it to be completely removed. So, unless you want to modify source and compile, it's going to be there. Also you probably want to look at the ServerTokens directive.

Apache bugzilla entry is here

link|improve this answer
That is not cool. – Jat Jul 8 '11 at 22:08
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.