How to start TLS (supposedly):
- load trust anchors
- configure TLS
- start Handshake

How curl starts TLS:
- configure TLS
- start Handshake
- load trust anchors*

One does not need the trust anchors until the server answers. Which usually takes longer than the loading.

*) not all TLS backends can do that late

0

If you have a fediverse account, you can quote this note from your own instance. Search https://chaos.social/users/icing/statuses/114522003363346682 on your instance and quote it. (Note that quoting is not supported in Mastodon.)