Just to clarify it again, the -k should work and it works on my oracle cloud server.
Run the man curl, and I can see the following definition,
-k, --insecure
(TLS SFTP SCP) By default, every secure connection curl makes is verified to be secure before the transfer takes...