title: How to set custom Http header "server" for Spring Boot applications
body: <p>By default the HTTP "server" header for Spring Boot applications with embedded Tomcat is:</p>
  
  <pre><code>Server → Apache-Coyote/1.1
  </code></pre>
  
  <p>How can it in <strong>Spring Boot</strong> be achieved to use another (custom) "server" header?</p>
  
  <p>For Tomcat itself, it can be configured at the <code>&lt;Connector&gt;</code> element in XML via the <code>server</code> attribute:</p>
  
  <p>From <a href="https://tomcat.apache.org/tomcat-8.0-doc/security-howto.html#Connectors" rel="noreferrer">https://tomcat.apache.org/tomcat-8.0-doc/security-howto.html#Connectors</a> :</p>
  
  <blockquote>
    <p>The server attribute controls the value of the Server HTTP header. The default value of this header for Tomcat 4.1.x to 8.0.x is Apache-Coyote/1.1. This header can provide limited information to both legitimate clients and attackers.</p>
  </blockquote>
  
  <p>But attackers will still know that this is a Tomcat server.</p>