The text b86f0b3c2aad, as Debian 11 (Bullseye) shipped it.
enable TLS false start
CURLOPT_SSL_FALSESTART(3) on Linux now