OK - Google doesn't actually tell you this (although they drop a lot of hints). But good SEOs (and there aren't many of them) do research on this as part of their job. It comes down to a whole series of factors: encryption - encrypted sites are safer than non-encrypted sites and so rank higher.