This looks like it still uses https. Currently I am giving openkeychain on android a try. It's trust establishment process is very interesting.

Sadly I understand https much better than alternatives, due to web hosting experience. I am trying to catch up.