I cannot remove the "Server" header from the response headers. I am using Amazon EC2. I have added this in Apache config:
ServerSignature Off
Header unset Server
RequestHeader unset Server
It does not do anything. I can still see the server header saying "Apache (Amazon)" in the response headers. Any clue?
Best Answer
You can not unset the Server response header. Though, it is not required by HTTP RFC, the Apache httpd developers are not in favor of allowing it to be completely removed. So, unless you want to modify source and compile, it's going to be there. Also you probably want to look at the ServerTokens directive.
Apache bugzilla entry is here