To disable Apache Info show for security reasons.

I tend to forget the syntax every time, but one of the first things I do when I setup an Apache web server is add/edit these two directive in my httpd.conf:

ServerSignature OffServerTokens Prod

The first one,

ServerSignature Off

tells apache not to display the server version on error pages, or other pages it generates.

The second one

ServerTokens Prod

tells apache to only return Apache in the Server header, returned on every page request.

Why do this?