I have to add a note, that the problem is only with VirtualHosts, which have the same DocumentRoot. This corresponds to Steve Langasek's description at #317577. But the leakage of information is from _ALL_ VirtualHosts, not only from VirtualHosts with the same DocumentRoot. -- Marek Drápal - http://drapal.org/