Remove Server header

At best, it's an insecure default that requires a reverse proxy to remove.

http://cwe.mitre.org/data/definitions/200.html