Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:40326 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 91012 invoked from network); 8 Sep 2008 09:44:45 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 8 Sep 2008 09:44:45 -0000 Authentication-Results: pb1.pair.com header.from=lstrojny@php.net; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=lstrojny@php.net; spf=unknown; sender-id=unknown Received-SPF: unknown (pb1.pair.com: domain php.net does not designate 78.46.69.2 as permitted sender) X-PHP-List-Original-Sender: lstrojny@php.net X-Host-Fingerprint: 78.46.69.2 milch.schokokeks.org Received: from [78.46.69.2] ([78.46.69.2:33687] helo=milch.schokokeks.org) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 01/A5-58883-C04F4C84 for ; Mon, 08 Sep 2008 05:44:45 -0400 Received: from [10.88.8.133] (colt-d53d2146.colt.mediaventures.de [::ffff:213.61.33.70]) (AUTH: PLAIN lars@schokokeks.org, TLS: TLSv1/SSLv3,256bits,CAMELLIA256-SHA) by milch.schokokeks.org with esmtp; Mon, 08 Sep 2008 11:44:40 +0200 id 000000000000C00C.0000000048C4F408.00006A52 To: Cristian =?ISO-8859-1?Q?Rodr=EDguez?= Cc: internals@lists.php.net In-Reply-To: <48C4F08C.6030504@suse.de> References: <48C27AB1.3000505@cshell.gr> <48C4F08C.6030504@suse.de> Date: Mon, 08 Sep 2008 11:44:39 +0200 Message-ID: <1220867079.2633.0.camel@localhost> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=_milch.schokokeks.org-27218-1220867080-0001-2" X-Mailer: Evolution 2.22.3.1 Subject: Re: [PHP-DEV] remove x-powered-by from php 5.2.3 cgi module From: lstrojny@php.net (Lars Strojny) --=_milch.schokokeks.org-27218-1220867080-0001-2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Christian, Am Montag, den 08.09.2008, 05:29 -0400 schrieb Cristian Rodr=C3=ADguez: [...] > I hope you are kidding .. do you still think that "security through > obscurity" has any value ? Doesn't matter. expose_php=3DOff should definitely disable that header too. So it is a bug. cu, Lars --=20 Jabber: lars@strojny.net Weblog: http://usrportage.de --=_milch.schokokeks.org-27218-1220867080-0001-2 Content-Type: application/pgp-signature; name="signature.asc" Content-Transfer-Encoding: 7bit Content-Description: Dies ist ein digital signierter Nachrichtenteil -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (GNU/Linux) iQIcBAABAgAGBQJIxPQHAAoJECQPF+sCY6wHkSkP/2VgUbL4CkKrBPUQpfyS0cnB LUpRqY9BFS+Kvo1l4h/35/Izljl5zThebZqT5r/YEyFtErveUxcpKVCahOGDKnWM IoIf68wXtGMoun63BOYL8S2X9AlUiD+LY/7Hlnv2NzaT/Sr+AVdQFBzwhlV76r2R fRTIBW/OfmOOCqaanydYrxyuR2NlrYzwXB1GgtX5vezT9EjXrITF+p6n6o1dpMnd DFZgLvzfxtbh3jHjsofJ8IWQNgqClqgLfAeEQMj78dv22gR7QxemrMlH9GERW/Zq BZRNG2HuAfhM2o8AwFMRLInbZSJIYEVaNJKOlnaH8vZicyfneEnPvHJvh+/+Eqqv 3bsqT7IZCFOqSFY4Jl1taV/4tMA358MdpAOF8qq7fdI3baIAoqGNhurvmcp0SBOQ kRt8rn6YIKUJ+jJAUXKggxPiEVFyu2pB9qkIyGSRzUGHPiHV/Q/rToeEB5LJ7WFd I0yhaJKqZDhZHmy0TYUnQ1J3m++2BtNWXGf8+8ZInoOJZfIa0t1+Rk/mNRWIdxtg PVfaa1su2vmWJVlXuJ1TpTZdctXYVvXzZUkly0xM1ER+xnv4kPdnbg0jI611eMkN Ua3dDVBegqC5/C7vGcWjGca+FdoIqcG1YThF80cAw0fmbfOTiklvlHX8uG43AOBu 0PPHU/KJd6H5rze0lTJX =wIAP -----END PGP SIGNATURE----- --=_milch.schokokeks.org-27218-1220867080-0001-2--