Version disclosure

It would be nice if we could disable version disclosure in Nextcloud prior to user being logged in. That a site is indeed a Nextcloud installation is probably more or less impossible to hide, but perhaps it’s possible not to disclose information or output patterns that reveal which version is installed.

-joho

I doubt that you would gain a lot with this, from the design of the startpage you can already tell which version is installed (unless you spend a lot of time to completely disguise it).

Well I guess that depends on what you’re after :slight_smile:

If an exploit is discovered, and you can easily figure out which sites a) run NC and b) what version of NC they run, it’s probably no big thing to automate things.

But I’m sure you’re right, after all, security through obscurity doesn’t fly very well.