WebApp Sec mailing list archives

RE: [WEB SECURITY] Tomcat Security


From: "Nathan Tobik" <nathan.tobik () vigilantminds com>
Date: Thu, 11 Aug 2005 11:44:32 -0400

Are you changing the banner information in Tomcat as part of your
security process?  There was a discussion on this list a few months ago
about the value of changing banners.  From what I remember there is
almost no security value added by changing a banner.  I would work on
making sure your application is secure and then it won't matter if an
attacker knows you're running Java or not.

Nate Tobik
(412)661-5700 x206
VigilantMinds

<snip>...

One of my unanswered questions is how to change the banner information
in 
Tomcat.
Any info would be greatly appreciated,

Thks,

Andy

</snip>



Current thread: