Hi,
I have a requirement that all SSL content served from a number of web sites hosted on 2008 R2/ IIS 7.5 give the cache-control: no-store, pragma: no-cache and Expires: and Date: both to the current date/time headers, and all other content returned as usual (currently cache-control: private, max-age=3600 though this may change). Ideally I'd like to base the response on the request being HTTP or HTTPS, rather than have to try to maintain a list of the secure areas/pages within the site and set these individually as this is something additional to maintain. SSL is terminated on the IIS servers currently.
I'm not sure if this is something I could do with the URL Rewrite module, or Application Request Routing, and can't find anything that helps so I'm hoping someone can point me in the right direction.
Cheers,
Laurie Calverley