use https to download the gpg public key