Opened 5 years ago

Closed 5 years ago

Last modified 4 years ago

#14431 closed (wontfix)

Add a X-Powered-By header by default

Reported by: vdboor Owned by: nobody
Component: Core (Other) Version: 1.2
Severity: Keywords:
Cc: Triage Stage: Unreviewed
Has patch: no Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: UI/UX:


I'd like to suggest putting a X-Powered-By: Django header in the HTTP response by default.
This is also done by other major frameworks, and it's a neat way to measure market share.
Currently Django sites are quite invisible at the web, which is imho not helping to spread Django to more users.

Change History (5)

comment:1 Changed 5 years ago by vdboor

  • Needs documentation unset
  • Needs tests unset
  • Patch needs improvement unset

For example, it would be cool if could detect and list Django projects.

comment:2 Changed 5 years ago by andrewgodwin

I can't help but feel this is going a bit too far; I know of several sites that don't wish to advertise that they're made with Django - especially more "enterprisey" companies - and putting this in by default is going to undermine that (especially if it's not written in big, bold letters on the release notes).

What advantages does this bring? As far as I can tell all it would do it make it easier for people to detect trends - like you linked above - and I'm not sure that's worth the potential backlash. I don't personally pick frameworks based purely on which is the most popular, and I'm also not sure that's a picking method we want to necessarily encourage.

comment:3 Changed 5 years ago by russellm

  • Resolution set to wontfix
  • Status changed from new to closed

I concur with Andrew. While it would certainly be nice in a "hey, look what we built" sense, it is, in the purest sense, a leak of valuable information that could be used as the basis for compromising a site. If people want to advertise that they are using Django, they're welcome to do so; there's no reason for us to advertise this fact for them by default.

comment:4 Changed 5 years ago by russellm

I should also add that we're in the process of setting up an officially-blessed mechanism for sharing success stories, which should be a valuable way to increase the visibility of Django in a very real way.

comment:5 Changed 4 years ago by jacob

  • milestone 1.3 deleted

Milestone 1.3 deleted

Note: See TracTickets for help on using tickets.
Back to Top