Checks

Apple App Site Association is empty

apple-app-site-association is reachable but has no applinks details.

Why it matters

An empty association file can be claimed later if app identifiers are reused.

What to do

Publish valid applinks details or remove the file.

Reference

Server and framework disclosure headers reveal implementation details useful to attackers.

OWASP WSTG — Fingerprint Web Server