On: 25 Gbit/s HTTP and HTTPS download speeds

[secure]

I’m using the defaults of each server.

In practice, as you suspected, this amounts to AES, as per the curl -v output:

SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384

[thecompilr → secure]

Thanks, you should use AES-128-GCM, it is about 40% faster and is much more common on the internet.