Hello,
We have recently set up an IIS web site that runs on SSL. Unfortunately,
the performance is now much slower. In looking at the logs, it appears that
I am no longer getting any (not modified) 304 responses, now they are all
200. This is causing a lot of overhead because we are using some of the
ajax framework features, and the scripts are pretty big. Is there a
configuration I can apply that would make IIS start sending 304 responses,
or is this an SSL behaviour.
Thanks in advance.
--
Rob Schieber
Peter Bromberg [C# MVP] - 03 Dec 2007 15:46 GMT
Probably what you want to consider is only enabling SSL for the portion(s) of
the site where it is really required. Here is a pretty good article that
covers this:
http://www.leastprivilege.com/PartiallySSLSecuredWebAppsWithASPNET.aspx
--Peter
"Inside every large program, there is a small program trying to get out."
http://www.eggheadcafe.com
http://petesbloggerama.blogspot.com
http://www.blogmetafinder.com
> Hello,
>
[quoted text clipped - 10 lines]
> --
> Rob Schieber
Mark Rae [MVP] - 03 Dec 2007 16:07 GMT
> Probably what you want to consider is only enabling SSL for the portion(s)
> of
> the site where it is really required. Here is a pretty good article that
> covers this:
>
> http://www.leastprivilege.com/PartiallySSLSecuredWebAppsWithASPNET.aspx
I use this:
http://www.codeproject.com/aspnet/WebPageSecurity_v2.asp?msg=2344204
The CodeProject.com website seems to be down at the moment, though...

Signature
Mark Rae
ASP.NET MVP
http://www.markrae.net
John Timney (MVP) - 03 Dec 2007 15:49 GMT
Pretty sure you need to set the last modified header in your specific pages
to get your script requests to return a 304
Regards
John Timney (MVP)
http://www.johntimney.com
http://www.johntimney.com/blog
> Hello,
>
[quoted text clipped - 11 lines]
> --
> Rob Schieber
bruce barker - 03 Dec 2007 17:15 GMT
this is usually a ssl configuration. a common default for ssl to set the
xpir header to true so that all downloads are not written to disk. most
can be configured to trust the actual headers.
-- bruce (sqlwork.com)
> Hello,
>
[quoted text clipped - 10 lines]
> --
> Rob Schieber