SSL Question

[Rob Schieber]

Hello,

We have recently set up an IIS web site that runs on SSL. Unfortunately,
the performance is now much slower. In looking at the logs, it appears that
I am no longer getting any (not modified) 304 responses, now they are all
200. This is causing a lot of overhead because we are using some of the
ajax framework features, and the scripts are pretty big. Is there a
configuration I can apply that would make IIS start sending 304 responses,
or is this an SSL behaviour.

Thanks in advance.

 

[Peter Bromberg [C# MVP]]

Probably what you want to consider is only enabling SSL for the portion(s) of
the site where it is really required. Here is a pretty good article that
covers this:

http://www.leastprivilege.com/PartiallySSLSecuredWebAppsWithASPNET.aspx


--Peter
"Inside every large program, there is a small program trying to get out."
http://www.eggheadcafe.com
http://petesbloggerama.blogspot.com
http://www.blogmetafinder.com

 

[John Timney \(MVP\)]

Pretty sure you need to set the last modified header in your specific pages
to get your script requests to return a 304

Regards

John Timney (MVP)
http://www.johntimney.com
http://www.johntimney.com/blog

 

[Mark Rae [MVP]]

Probably what you want to consider is only enabling SSL for the portion(s)
of
the site where it is really required. Here is a pretty good article that
covers this:

http://www.leastprivilege.com/PartiallySSLSecuredWebAppsWithASPNET.aspx

I use this:
http://www.codeproject.com/aspnet/WebPageSecurity_v2.asp?msg=2344204

The CodeProject.com website seems to be down at the moment, though...

 

[bruce barker]

this is usually a ssl configuration. a common default for ssl to set the
xpir header to true so that all downloads are not written to disk. most
can be configured to trust the actual headers.

-- bruce (sqlwork.com)