Make `native-tls` default for uv?

[notatallshaw-gts]

Pip 24.2+, on Python 3.10+, you get truststore by default: https://pip.pypa.io/en/stable/topics/https-certificates/#using-system-certificate-stores / https://github.com/sethmlarson/truststore

As I understand it, this is roughly equivalent to uv's native-tls. Would it make sense for uv to switch native-tls on by default and have an option to turn off if needed?

[zanieb]

See also

• https://github.com/encode/httpx/issues/302
• https://github.com/astral-sh/uv/pull/2362
• https://github.com/rustls/rustls-platform-verifier

Notably in https://github.com/astral-sh/uv/pull/2362 we identified that enabling native tls by default was weirdly slow on macOS.