Sometimes .NET really winds me up. Why do they by default put things that could potentially give a hacker some information. I know security by obscurity is not the best way forward but why leave your front door open!

Anywho - it is really easy to get rid of:

Find or add the element <httpRuntime> in your web.config and add the attribute enableVersionHeader=”false”.

The msd documentation can be found here: http://msdn.microsoft.com/en-us/library/e1f13641.aspx

Posted Monday, June 9th, 2008 at 8:25 pm
Filed Under Category: .NET
Responses are currently closed, but you can trackback from your own site.

0

Comments are closed.