Improve Apache server security by limiting the information

 Typically server have 2 response headers in Apache2 which you want to remove for security reason.

  • ServerSignature - used to configure a footer line under the server-generated documents. 
  • ServerTokens - controls the details which the server sends. The details can include OS and other complied modules.

Implementation Procedure in Apache2

  • Run this command sudo nano /etc/apache2/conf-enabled/security.conf
  • Within that file, search for SeverTokens and set it to Prod
  • Then search for ServerSignature and set it to Off
  • Save and close that file. Restart Apache with the command
  • sudo systemctl restart apache2

Comments

Popular posts from this blog

Stop video playing when Bootstrap modal is closed

Creating Protected routes in ReactJS