Response · Response header

Server

Identifies the server software.

What is Server?

Purely informational — and mildly a security leak (it advertises your stack). Many hardened servers strip or fake this header.

Optional. Often stripped in production.

Server: nginx/1.25.3

Attackers use Server headers for reconnaissance. Consider removing it on production.

RFC 9110 §10.2.4

Location

The redirect target (3xx) or newly created resource URL (201).

Retry-After

How long the client should wait before retrying.

Date

When the response was generated.

Allow

Which HTTP methods the target resource supports.

Link

Serialized <link> relationships as an HTTP header.