fetch external resources via https