Well, wp_enqueue_script() and wp_enqueue_style() will use whatever you pass to it as the second parameter $url. I can’t rely on plugin and theme authors doing the right thing and using plugins_url() or get_template_directory_uri() when enqueuing stuff.

Secondly, I am storing the combined files in the uploads folder and wp_upload_dir() doesn’t seem to check for SSL.