2 Feb
2001
2 Feb
'01
11:48 a.m.
On 1 Feb 2001, Paul Vixie wrote:
Simon@wretched.demon.co.uk (Simon Waters) writes:
The ISC.ORG web site recommends leaving the BIND version string unchanged to assist in troubleshooting.
I remain unconvinced that showing the version string helps much.
it helped you with your survey, didn't it?
hiding it doesn't help at all. people who want to know if you're vulnerable and to what have tools to find out.
hiding it DOES however make it harder for people (including network owners) to do surveys.
By the same token one might argue that atempting to hide vunerabilities to those paying you for "early warnings" doesn't help at all. Just something to consider.