Nginx/MIAB hardening (security)

Questions get asked about the simplest things, how many questions will be asked about an advanced tab. If the changes you propose have an actual proven benefit to miab, make a pr so it can be the default setting.

But as Josh said, proof that the attack is possible on the current setup.

In my opinion it makes no sense in doing something in a guide if we don’t know for sure it applies to us. The easiest way to figure that out is make a PR for each proposed change so it can be assessed based on it merits. Otherwise this is just a meta discussion about an advanced tab.