{{tag>apache hardening howto}}
====== Apache Hardening ======

===== HTTP Trace =====
  * http://www.ducea.com/2007/10/22/apache-tips-disable-the-http-trace-method/
  * https://security.stackexchange.com/questions/56955/is-the-http-trace-method-a-security-vulnerability

===== Turn off Tokens/Signature/HTTP Trace =====
<sxh bash; gutter: false>
vim /etc/apache2/apache2.conf
</sxh>
<sxh bash; title: /etc/apache2/apache2.conf>
ServerTokens Prod
ServerSignature Off
TraceEnable off
</sxh>

----
~~DISCUSSION~~