# Show Discourse version on the /about page **URL:** \ **Category:** Feature\ **Created:** [4. April 2015 um 18:35 UTC](https://meta.discourse.org/t/show-discourse-version-on-the-about-page/27205 "2015-04-04T18:35:05Z")\ **Posts on this page:** 1\ **Showing post:** 5
**Author:** ![lidel](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lidel/32/115991_2.png) [@lidel](https://meta.discourse.org/u/lidel)\ **Post date:** [5. April 2015 um 12:04 UTC](https://meta.discourse.org/t/show-discourse-version-on-the-about-page/27205/5 "2015-04-05T12:04:28Z")
I’ve seen some administrators disable software version numbers in HTTP responses, others go further and recompile Apache to identify as Microsoft’s IIS or Nginx to pretend to be Apache [sic]. This is a part of something known as > **[Security through obscurity](https://en.wikipedia.org/wiki/Security_through_obscurity)** > > In security engineering, security through obscurity is the practice of concealing the details or mechanisms of a system to enhance its security. This approach relies on the principle of hiding something in plain sight, akin to a magician's sleight of hand or the use of camouflage. It diverges from traditional security methods, such as physical locks, and is more about obscuring information or characteristics to deter potential threats. Examples of this practice include disguising sensitive inform... It gives no protection against directed attacks, but usually mitigate a big chunk of automated threats performed by inexperienced/unmotivated adversaries. I guess @terraboss’ concern is that script-kiddies would crawl the web and look for a specific Discourse versions with known vulnerability and execute an exploit if version is low enough (unpatched installations). This was/is the [main concern for phpBB installations](http://www.cvedetails.com/vulnerability-list/vendor_id-1529/Phpbb.html). In this context it would be beneficial to add an option to `/admin` that controls displaying Discourse version (in `` and `/about`). That being said, we probably want to follow example of Nginx and others and keep it enabled by default (version visible). --- _[View the full topic](https://meta.discourse.org/t/show-discourse-version-on-the-about-page/27205)._