unbounce/http2httpsredirect

A docker nano-service to provide http redirects to https.

http2httpsredirect's Issues

Security: http response includes server version

When making calls to this docker container, the nginx server responds with the server version. FOr security, these headers should be modified or removed completely.

$ curl -I http://localhost
HTTP/1.1 301 Moved Permanently
Content-Length: 185
Content-Type: text/html
Date: Fri, 09 Jun 2017 19:08:01 GMT
Location: https://localhost/
Server: nginx/1.10.1
Connection: keep-alive

The fact that this project is a small docker with limited usage, this lowers the priority on the ticket, but it should still be cleaned up regardless.