On Wed, Jan 13, 2021 at 2:04 PM sanjay9999 <nginx-fo...@forum.nginx.org> wrote: > > Thanks for the update. > I have already taken care to hide the "nginx". > > With CAPITAL letters, my testcase using "POSTSSS" for request_method, works > fine.However, for mixed-case and small-case , nginx default rule applies and > control does not reach my server block. hence I end up getting 400 error > with "nginx" server name in html response. >
I'm curious. Could you share your server block config? As for the server name, I've thought about it in the past and initially saw it as an issue. However, as an open source supporter and user I can definitely understand the wishes of the nginx team and do want to advertise for the project as well. On the practical side, IMO I think there are more things you need to worry about than simply hiding the name. If somebody can compromise your system based on knowing that it's nginx, you either have a config issue, or they are smart enough to detect nginx even without you advertising the name. -jf _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx
