@johns I promise this question is not trolling, though it is part of my ongoing shouting-into-the-wind process about blind spots in public FOSSy debates: exactly how much info can we get about the configuration and contents of a web server before we can say that it's free software? Do we trust that if sniffing HTTP traffic says it's Apache, it's 100% okay? Can I get the full configuration (well, sans key material) of FSF.org?
@johns 👍 I'll resume the trolling then.