What if you don't set the "Server" header?
Test if a URL uses Node.js
31–34 of 34 posts
Re: Test if a URL uses Node.js
#32If your server is detected, that's a security vulnerability. You should never be able to identify the underlying technology of your stack or you open yourself to attack on any known vulnerabilities where as if your stack is unknown, then the vectors for attack are much less obvious.
Security through obscurity is not effective.
Re: Test if a URL uses Node.js
#33If your server is detected, that's a security vulnerability. You should never be able to identify the underlying technology of your stack or you open yourself to attack on any known vulnerabilities where as if your stack is unknown, then the vectors for attack are much less obvious.
Security through obscurity is not effective.
and x-powered-by headers are worthless,why set them up?
Re: Test if a URL uses Node.js
#34If your server is detected, that's a security vulnerability. You should never be able to identify the underlying technology of your stack or you open yourself to attack on any known vulnerabilities where as if your stack is unknown, then the vectors for attack are much less obvious.
Security through obscurity is not effective.
Yes it is, in fact it's better than nothing and will prevent some form of basic attacks.