Information Disclosure

Difficulty: Beginner

Question

Why should you disable the 'Server' header (e.g., 'Server: nginx/1.14.0')?

Answer

To prevent attackers from knowing your exact server version, which helps them find specific exploits for that version.

Concepts covered

Privacy, Hardening