unlike macos's curl, powershell's curl alias for Invoke-WebRequest checks the revoke list and will protect you from mitmproxy --emudhra

Unfortunately, it's not cURL. Not even cURL for Windows. It's build against the Schannel library. That is curl.exe, not iwr. Stemberg wrote a Blogpost you can find here https://daniel.haxx.se/blog/2023/04/24/deleting-system32curl...

No Idea what MacOS ships with but I'd mistrust that. But if you're running shell scripts...

Why doesn't curl check revoke list.