I see... It's actually the feed generated by Nitter if you see (for this case) the actual feed (https://nitter.moomoo.me/SpaceX/rss) all links are with "http".

I will implement a solution to replace all links schemas to https if the server supports it. As you said it doesn't require to change the pubkey, I was wrong