Use a secure URL for your initial connection, i.e. instead of “http://” use “https://”. If the WebSocket transport is chosen, then Socket.IO should automatically use “wss://” (SSL) for the WebSocket connection too.
Update:
You can also try creating the connection using the ‘secure’ option:
var socket = io.connect('https://localhost', {secure: true});