The web master at my corporation added SSL to the web site and now none of my users can download Microsoft word and xcel files the sites generates. According to Microsoft the following must be down.

Web sites that want to allow this type of operation should remove the no-cache header or headers.

Typical of MS they don't tell you what to do, how to do it, or what the best practice is. The web master says its a web config setting. But all i can finds is

<configuration>
    <appSettings/>
    <connectionStrings/>
    <system.web>
    <httpRuntime sendCacheControlHeader="false"/>

and I don't know if this is the best way to achieve the result.

I would greatly appreciate some advice on this subject.