bleh... bad idea.

APACHE 2.0 STATUS:                                              -*-text-*-

Last modified at [$Date: 2002/05/07 18:22:59 $]

Last modified at [$Date: 2002/05/07 19:21:49 $]

Release:

      to the config. Possibly go one step further and add a option

      to just report '2.0' instead of '2.0.x'

      +1:   IanH, BrianP

      -1: Greg

         I use the default response all the time to verify that a

	 module is present and at the proper version. This information

	 is also very handy for the module surveys, to determine what

	 modules are out there and in prevalent use (see

	 securityspace.com; frickin' JServ is still increasing in

	 numbers!). Security conscious people can change this on their

	 own, when required. Removing the information doesn't remove

	 any future vulnerabilities. Assuming that a vulnerability

	 occurred, I highly doubt that somebody would actually bother

	 to *test* the version reported in the response before

	 attempting to use the vulnerability, so trying to hide the

	 information isn't all that useful.

RELEASE NON-SHOWSTOPPERS BUT WOULD BE REAL NICE TO WRAP THESE UP:

    * Get mod_cache/mod_mem_cache out of experimental (still some