Why do some web servers still provide information on vendor and version in the HTTP response headers

I think in the security field it is a well-known fact that its not a good idea to let the web server vendor (e.g. Apache) and the version be visible to the outside as this can be used to launch targeted attacks against a spec… Continue reading Why do some web servers still provide information on vendor and version in the HTTP response headers

What security precautions should we take when letting a C# application send/receive emails?

I’m writing a web application which will be able to send signed and encrypted emails to someone else outside my trust boundary. It will also retrieve S/MIME encrypted (and maybe also signed) emails from different accounts.

W… Continue reading What security precautions should we take when letting a C# application send/receive emails?