http://www.iis.net/ConfigReference/system.webServer/httpProtocol/customHeaders
To remove the MVC header,
In Global.asax, in the Application Start event:
MvcHandler.DisableMvcResponseHeader = true;
Put this in the web.config get rid of the X-AspNet-Version header:
<system.web> <httpRuntime enableVersionHeader="false" /> </system.web>