Apache ¼¹öÁ¤º¸ ¼û±â±â (Response Headers ¼¹ö Á¤º¸ ¼û±â±â)
¾ÆÆÄÄ¡¿¡ ¸®½ºÆù½º Çì´õ¿¡¼ ¼¹ö Á¤º¸¸¦ ³ëÃâÇÏ´Â °æ¿ì, ¼¹öÁ¤º¸¸¦ ¼û±â±â À§Çؼ httpd.conf ÆÄÀÏÀ» ¼öÁ¤ÇØ¾ß ÇÕ´Ï´Ù.
( ¸®´ª½º¿¡¼ ¼¹öÀÇ Çì´õ Á¤º¸¸¦ È®ÀÎÇϱâ À§Çؼ´Â 'curl -I http://localhost'·Î È®ÀÎ °¡´ÉÇÕ´Ï´Ù. )
( ex) Server: Apache/2.4.27 (Unix) )
httpd.conf ÆÄÀÏ¿¡¼ ServerTokens ¸¦ °Ë»öÇÕ´Ï´Ù.
( vi·Î Àд°æ¿ì /ServerTokens ·Î °Ë»ö °¡´É )
¸¸¾à °Ë»öÀÌ µÇÁö¾Ê´Â´Ù¸é, httpd.conf ÆÄÀÏ¿¡ ¾Æ·¡ÀÇ ³»¿ëÀ» Ãß°¡ÇÕ´Ï´Ù. ( À§Ä¡ »ó°ü X )
ServerTokens Prod
ServerSignature Off
ÀÌ¹Ì ÇØ´ç ³»¿ëÀÌ À־ À§¿Í °°ÀÌ ¼öÁ¤À» ÇÏ¸é µË´Ï´Ù.
ServerTokens ´Â ¸®½ºÆù½º Çì´õ¿¡¼ º¸¿©ÁÖ´Â ¼¹ö Á¤º¸ÀÇ ·¹º§À» ÁöÁ¤ÇÏ´Â °Í ÀÔ´Ï´Ù.
( Prod´Â ÃÖ¼ÒÀÇ ¼¹ö Á¤º¸¸¦ º¸¿©ÁÖ°Ô µË´Ï´Ù. ex) Server: Apache )
ServerSignature ´Â 404 ¹ß»ý½Ã ¼¹öÁ¤º¸¸¦ º¸¿©ÁÖ´Â °ÍÀ» On/Off ÇÏ´Â °Í ÀÔ´Ï´Ù.
¼öÁ¤ÇÏ¿© ÀúÀå ÈÄ httpd¸¦ Àç½ÇÇàÇϸé Àû¿ë °¡´ÉÇÕ´Ï´Ù.
Ãâó: http://nahosung.tistory.com/107 [nahos]