To emphasize James' point, there is no HTTPS engine, there is only the HTTP state machine. HTTPS simply has a different encoding on the wire, the internals as far as ATS is concerned are identical and handled by the same code. What I would suspect is that his HTTPS connections are being blinded tunneled, not terminated, on ATS.
