Ssl – Is it still necessary to turn off SSL keepalive, etc. in Apache for all MSIE

apache-2.2internet explorerssl

Apache's default configuration includes something like this in ssl.conf:

SetEnvIf User-Agent ".*MSIE.*"
    nokeepalive ssl-unclean-shutdown
    downgrade-1.0 force-response-1.0

Do newer IE still require all of these workarounds?

Best Answer

The issue seemed to center mostly around uploading files to a host via an SSL secured session.

MS says it's been fixed as of IE7. Mentioned at the end of this article: http://blogs.technet.com/askperf/archive/2007/11/09/internet-explorer-and-ssl-closure-alerts.aspx

If it's still there in the latest version of Apache, I'd err on the side of caution and keep it in there. The performance hit for your server and IE clients is not as bad as rendering them unable to access parts of the site.