the AUR API wants HTTPS, good on them :-)