Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / General / December 2007

Tip: Looking for answers? Try searching our database.

SSL Question

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Rob Schieber - 03 Dec 2007 15:08 GMT
Hello,

We have recently set up an IIS web site that runs on SSL.  Unfortunately,
the performance is now much slower.  In looking at the logs, it appears that
I am no longer getting any (not modified) 304 responses, now they are all
200.  This is causing a lot of overhead because we are using some of the
ajax framework features, and the scripts are pretty big.  Is there a
configuration I can apply that would make IIS start sending 304 responses,
or is this an SSL behaviour.

Thanks in advance.

--
Rob Schieber
Peter Bromberg [C# MVP] - 03 Dec 2007 15:46 GMT
Probably what you want to consider is only enabling SSL for the portion(s) of
the site where it is really required. Here is a pretty good article that
covers this:

http://www.leastprivilege.com/PartiallySSLSecuredWebAppsWithASPNET.aspx

--Peter
"Inside every large program, there is a small program trying to get out."
http://www.eggheadcafe.com
http://petesbloggerama.blogspot.com
http://www.blogmetafinder.com

> Hello,
>
[quoted text clipped - 10 lines]
> --
> Rob Schieber
Mark Rae [MVP] - 03 Dec 2007 16:07 GMT
> Probably what you want to consider is only enabling SSL for the portion(s)
> of
> the site where it is really required. Here is a pretty good article that
> covers this:
>
> http://www.leastprivilege.com/PartiallySSLSecuredWebAppsWithASPNET.aspx

I use this:
http://www.codeproject.com/aspnet/WebPageSecurity_v2.asp?msg=2344204

The CodeProject.com website seems to be down at the moment, though...

Signature

Mark Rae
ASP.NET MVP
http://www.markrae.net

John Timney (MVP) - 03 Dec 2007 15:49 GMT
Pretty sure you need to set the last modified header in your specific pages
to get your script requests to return a 304

Regards

John Timney (MVP)
http://www.johntimney.com
http://www.johntimney.com/blog

> Hello,
>
[quoted text clipped - 11 lines]
> --
> Rob Schieber
bruce barker - 03 Dec 2007 17:15 GMT
this is usually a ssl configuration. a common default for ssl to set the
xpir header to true so that all downloads are not written to disk. most
can be configured to trust the actual headers.

-- bruce (sqlwork.com)

> Hello,
>
[quoted text clipped - 10 lines]
> --
> Rob Schieber

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.