Fresh install has broken curl

Hello.

I freshly installed cachy last night via the torrent iso from the website.

After installing, some domains which use TLS 1.3 do not work with for example pacman, so couldn't update core repo etc etc, couldn't use paru, can't use git clone, all sorts. I could for example fix pacman by changing the conf to use wget, but this does not solve the problem that a quite literally fresh install has something so crucial fundamentally broken.

I've tried all sorts and cannot get it to work.

What's the solution?