In IIS 7.0
integrated mode
after deleting all headers with Response.ClearHeaders()
IIS would add some other headers like Server
For IIS7+ integrated mode, eth0 has it:
tag in web.config. Thanks for that. As for the "Server" header, if using MVC, you can simply add:
protected void Application_PreSendRequestHeaders()
{
Response.Headers.Remove("Server");
}
to your MvcApplication class in Global.asax. Otherwise, you can simply add a custom Http Module, handling the PreSendRequestHeaders event, and do the same thing.