From the course: ASP.NET: Security

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Hiding more server information

Hiding more server information

From the course: ASP.NET: Security

Start my 1-month free trial Buy for my team

Hiding more server information

“

- [Instructor] The browser developer tools tell us which http headers with revealing information are sent and version number, the asp.net version number, even the MVC version number, and well, that we are using asp.net. Not all of them are super critical, but let's get rid We start in web.config and as you have seen on the slides there are a few settings which we can do here, First of all we set the http protocol settings to add and to remove unwanted headers and wanted headers of course. So let's start with removing the x-powered-by http header because we do not want that one and we can only remove it here. If you want the application to be hosted on Azure eventually you have to add the x-liveupgrade header and set it to zero otherwise some of our settings And then we have to add the security node and it might look a little bit different on your system but on most systems the following will happen, so we defend a security…

Contents