In this case, this really seems to be a better idea. Do you, by any change, have a firewall intalled on the client machine? Some firewall software can strip this information from the HTTP header.