Disable MvcHandler.DisableMvcResponseHeader = true

We should place it somewhere to be executed within the Application_Start method. Additionally it makes sense to disable writing the standard MVC response header. Adding specific headers to the response is actually kind of a security issue (not a big one), since we are telling other people about the implementation of our system (here one could spy that obviously ASP.NET MVC is used).

MvcHandler.DisableMvcResponseHeader = true;
This leaves our web app behind with optimized headers .
http://www.codeproject.com/Articles/419054/Practical-ASP-NET-MVC-3-tips

http://www.codeproject.com/Articles/635324/Another-set-of-ASP-NET-MVC-4-tips#tip-01