Hi All, Do we want Zope to always respond to this header? Yes, it's helpful for testing, but surely it risks information disclosure vulnerabilities or worse if used on a production application? cheers, Chris -- Simplistix - Content Management, Zope & Python Consulting - http://www.simplistix.co.uk