News for hackers. Stuff that matters.
Re:Announcing Caddy Commercial Licenses by eropple on Wednesday September 13, 2017 @11:14AM (#15239007)
I don't think a small nudge to actually pay for the thing that benefits you, or have a small note somewhere that you're not paying for it that someone might--gasp!--see, is as big a deal as the histrionics throughout this thread suggest. You don't have a problem because there's an HTTP header, you have a problem because this makes you feel uncomfortable and you want to hide it, and that strikes me as a very different thing.

You can also pay-the-man. That's an option, too. Personally, if I "really [did] appreciate the work [mholt] and others have put into Caddy," I'd be doing that long before I go switch web server stacks, because wow that's not a lot of money if I'm doing anything where I actually care about a HTTP header, but I prioritize not freeloading where I can so that's probably "just a worldview thing".

Re:Announcing Caddy Commercial Licenses by jefurii on Wednesday September 13, 2017 @12:25PM (#15239823)
> I don't think a small nudge to actually pay for the thing that benefits you, or have a small note somewhere that you're not paying for it that someone might--gasp!--see, is as big a deal as the histrionics throughout this thread suggest. You don't have a problem because there's an HTTP header,

The problem with the HTTP header is that it reveals details about which www server you're running to the user, who may be a potential attacker. This makes it easier for a potential attacker to select tools with which to attack you. Apache and Nginx (and most likely other web servers) offer config settings which disable emitting information about the software and version in use. There are other ways to guess the software/version but it becomes harder.

This is an actual security problem, not some issue of feelings.

Re:Announcing Caddy Commercial Licenses by JamesMcMinn on Wednesday September 13, 2017 @11:21AM (#15239091)
Or perhaps I'm a student with no income trying to write a thesis at the same time as bootstrap a startup, and can't afford to spend $100/month on a reverse proxy? The new EULA states I'm not allowed to use the personal build, so I have little choice in that matter.

Your "worldview" doesn't seem to extend past the end of your own nose.

Re:Announcing Caddy Commercial Licenses by jimjimjim on Wednesday September 13, 2017 @04:33PM (#15242316)
you are a student and you are using something for FREE and you are also at the same time worried about extra stuff in the headers?

what is your startup going to do to generate money if you perpetuate the belief that no one should pay for anything?

Re:Announcing Caddy Commercial Licenses by JamesMcMinn on Wednesday September 13, 2017 @04:55PM (#15242567)
The startup has extremely limited resources, it's a bootstrap, as I explained. The licence prohibits us from using the personal licence, and there is a time cost involved in building and maintaining our own version. $1200 a year is not good value for us when NGINX will do the job for free.

I never claimed that no one should pay for anything, and I wish the people working on Caddy the best of luck. I think it's a fantastic piece of software and, as I have said several times, I am very grateful for the effort that has been put into making the project what it is.

However the change means that I have to act or be left with an out-of-date internet facing server. If you cannot see why I am annoyed at being given no choice but to spend time or money on solution because Caddy has introduced a new commercial licence, then I will not convince you of anything.