How to start TLS (supposedly):
- load trust anchors
- configure TLS
- start Handshake
How curl starts TLS:
- configure TLS
- start Handshake
- load trust anchors*
One does not need the trust anchors until the server answers. Which usually takes longer than the loading.
*) not all TLS backends can do that late
#curl