WebApp Sec mailing list archives
RE: [WEB SECURITY] Tomcat Security
From: "Nathan Tobik" <nathan.tobik () vigilantminds com>
Date: Thu, 11 Aug 2005 11:44:32 -0400
Are you changing the banner information in Tomcat as part of your security process? There was a discussion on this list a few months ago about the value of changing banners. From what I remember there is almost no security value added by changing a banner. I would work on making sure your application is secure and then it won't matter if an attacker knows you're running Java or not. Nate Tobik (412)661-5700 x206 VigilantMinds <snip>... One of my unanswered questions is how to change the banner information in Tomcat. Any info would be greatly appreciated, Thks, Andy </snip>
Current thread:
- RE: [WEB SECURITY] Tomcat Security Nathan Tobik (Aug 11)
- Re: [WEB SECURITY] Tomcat Security Ryan Barnett (Aug 11)
- Re: [WEB SECURITY] Tomcat Security Ron Forrester (Aug 11)
- Re: [WEB SECURITY] Tomcat Security Cyrill Brunschwiler (Aug 14)
- <Possible follow-ups>
- RE: [WEB SECURITY] Tomcat Security Jason Radley (Aug 11)