Just read this article on Google Analytics and the risk of forged certificates, where it said:
The thing is, one of the best things about Google Analytics is the ability to track goals -- getting users to interact with the site in specific ways.
If I turn off this functionality for SSL, it means that many of the goals -- getting them to sign up and getting them to buy things -- are going to necessarily be blocked.
So, I'm torn. Is there any way to continue using Google Analytics for this purpose while maintaining some semblance of security for my website? Is it just an impossible tradeoff of functionality vs. security?