STARTTLS
command. You tell curl to attempt this with --ssl
or if you want to insist on a secure connection you use --ssl-reqd
. Like this:pop3s://
or imaps://
. For such connections, curl will insist on connecting and negotiating a TLS connection already from the start, or it will fail its operation.