<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I think it is possible and easy to alter this information because it is a field written in the http header. Even for the servers themselves, they could probably lie about it because of the security consideration. The servers can alter any information in
packages they send by using a proxy, let's say Burpsuite. As for if it is common to do so, not really (I guess). Maybe only for the servers which are very sensitive about their information will choose to do so.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Jiahan</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> cs615asa-bounces@lists.stevens.edu <cs615asa-bounces@lists.stevens.edu> on behalf of Mark Freeman <mfreema1@stevens.edu><br>
<b>Sent:</b> Thursday, May 7, 2020 16:00<br>
<b>To:</b> CS615 - Aspects of System Administration <cs615asa@lists.stevens.edu><br>
<b>Subject:</b> [cs615asa] Dishonest Servers</font>
<div> </div>
</div>
<div>
<div dir="ltr">Hi all,
<div><br>
</div>
<div>I have a question that is not in any way related to the CtF.</div>
<div><br>
</div>
<div>Do servers commonly lie about what specific technology they are using? For instance, say that a server responds to me with a `Server: Apache/2.2` header. Should I take that at face value? I imagine it is set by the server itself so most users will likely
not alter it, however they still could. Is that a common thing?</div>
<div><br>
</div>
<div>Best,</div>
<div>Mark</div>
</div>
</div>
</body>
</html>