Downloads are over HTTPS (Let's Encrypt). If an "Untrusted Developer" message appears: Settings → General → VPN & Device Management → Trust