I emailed Valve last night and they've switched it back to HTTP. It will go back to HTTPS at some point in future, but when it happens there will be a way to achieve caching. I'd suggest following the GitHub project for Steam Cache as we'll post any updates over there.