...but of course you wisely selected "Always use HTTPS" in your Twitter settings (under Account), didn't you?