add to your tracking JS: _gaq.push(['_gat._forceSSL']);

And for the newer analytics.js: https://developers.google.com/analytics/devguides/collection...