Remove version from web

[yurirnascimento]

When we access the home page, we can see the current version of the server. Wouldn't it be interesting to remove this information? Many attacks use these versions to identify vulnerabilities and direct hacker attack.

Please correct me if I'm wrong.

[kpfleming]

This has been asked many times, and the answer is no, it wouldn't be 'interesting' :-) The server version information is also available via the API, which is used by all of the clients, and it is necessary for the clients to operate properly. Security through obscurity is not a good practice.

[yurirnascimento]

I understand, thanks for the answer!