It's a browser configuration thing, but I think you're right about the default.
Maybe a more intelligent approach would be to use "don't cache" if the server doesn't specify any caching headers. Otherwise, follow the server's recommendation.
Maybe a more intelligent approach would be to use "don't cache" if the server doesn't specify any caching headers. Otherwise, follow the server's recommendation.
There would be need to introduce a new header to trigger SSL based caching, and migrate towards simply not sending the old/normal cache header.