use https.

Old versions of curl may complain about CA certificates. Let's see what happens.