Its not something that could be changed from the current "default" without high risk of big impact. There would be need to introduce a new header to trigger SS

Its not something that could be changed from the current "default" without high risk of big impact. There would be need to introduce a new header to trigger SSL based caching, and migrate towards simply not sending the old/normal cache header.