Playing with ncat and TLS. Command line is MUCH nicer than openssl s_client, but:
$ ncat -C --ssl mwl.io 443
GET / mwl.io HTTP/1.1
HTTP/1.1 400 Bad Request
No chance to enter the Host header, won't accept \n.
Lots of questions, lots of advice to use openssl s_client.
So, I guess this isn't a thing? Sigh.