Thomas Weißschuh <tho...@t-8ch.de> wrote: > Hi, > > it would be nice if public-inbox could extend the HTML pages it > generates with the "generator" meta tag [0]. > Especially the version would be useful. > > This would help users during debugging to see the specific version of > public-inbox they are looking at.
What would users be debugging? Admins would be the only ones who care, I think... Version info becomes worthless if an admin blocks/alters certain endpoints via nginx/varnish or just editing the code. > For example: > > <head> > <title>Some page</title> > <meta name="generator" content="public-inbox 1.9.0" /> > </head> I prefer to disclose as little information as possible in case vulnerabilities are found. Alone, security by obscurity doesn't work, but obscurity does make things more difficult for attackers (same reason camouflage exists). I also don't like wasting memory+bandwidth on things most users won't see or care about. This is especially true for stuff at the beginnning of the output since that's most likely to succeed in being transferred. > [0] https://html.spec.whatwg.org/multipage/semantics.html#meta-generator > > Thanks, > Thomas
