How to disable HTTP TRACE on OpenBSD 5.3?

0 votes

0 answers

137 views

                          An nmap scan gaved this: 

	443/tcp  open     ssl/http Apache httpd
	| http-methods: GET HEAD OPTIONS TRACE
	| Potentially risky methods: TRACE
	|_See http://nmap.org/nsedoc/scripts/http-methods.html 

so I tried to: 

	# DISABLE TRACE
	vi /var/www/conf/httpd.conf
	TraceEnable off

**Q:** But it gaved syntax error. How can I securely disable Trace HTTP METHOD on OpenBSD 5.3?

p.s.: Why is an insecure option enabled in a secure OS?
                        

Asked by gasko peter (5634 rep)

Sep 11, 2013, 09:06 AM
Last activity: Jul 8, 2015, 12:08 PM

How to disable HTTP TRACE on OpenBSD 5.3?

Related Questions