Re: Microsoft-IIS/6.0 serves up Debian... WTF!
On Sun, Jun 8, 2008 at 5:30 PM, Simon Valiquette <v.simon@ieee.org> wrote:
> Jim Popovitch un jour écrivit:
>>
>> If they want to do this, fine. But should they continue to be in
>> rotation for ftp.us.debian.org?
>
> Personnaly, I would have chosen to impersonate another web server than
> IIS, but except for that I see no problem with what they have done.
>
>
> I don't see why you want them to be removed from ftp.us.debian.org,
> except that you don't like to see them lying about the server application
> and version they use, which is something done by a lot of people on
> production systems that directly face the Internet.
The reason is this: *if* they are using "security by obscurity", then
that raises the bigger question of their security knowledge and
capabilities. That would be enough for me to remove them from
distributing software to others from my domain (ftp.us.debian.org).
-Jim P.
Reply to: