diff --git a/tests/data/test1112 b/tests/data/test1112
index 5e03509b05..0790d0352b 100644
--- a/tests/data/test1112
+++ b/tests/data/test1112
@@ -91,7 +91,7 @@ ftps
 FTPS download with strict timeout and slow data transfer
 </name>
 <command>
--k --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/%TESTNUMBER -m 5
+--insecure --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/%TESTNUMBER -m 5
 </command>
 </client>
 
diff --git a/tests/data/test1268 b/tests/data/test1268
index 15b15b56e9..a3fb2bc41a 100644
--- a/tests/data/test1268
+++ b/tests/data/test1268
@@ -23,13 +23,13 @@ UnixSockets
 filename argument looks like a flag
 </name>
 <command>
---stderr %LOGDIR/moo%TESTNUMBER --unix-socket -k hej://moo
+--stderr %LOGDIR/moo%TESTNUMBER --unix-socket -q hej://moo
 </command>
 </client>
 
 <verify>
 <file name="%LOGDIR/moo%TESTNUMBER" mode="text">
-Warning: The filename argument '-k' looks like a flag.
+Warning: The filename argument '-q' looks like a flag.
 curl: (1) Protocol "hej" not supported
 </file>
 
diff --git a/tests/data/test1272 b/tests/data/test1272
index 9212428927..41fc3ef76f 100644
--- a/tests/data/test1272
+++ b/tests/data/test1272
@@ -29,7 +29,7 @@ gophers
 Gophers index
 </name>
 <command>
--k gophers://%HOSTIP:%GOPHERSPORT/1/%TESTNUMBER
+--insecure gophers://%HOSTIP:%GOPHERSPORT/1/%TESTNUMBER
 </command>
 </client>
 
diff --git a/tests/data/test1470 b/tests/data/test1470
index 1c9389a4cc..5c3d743434 100644
--- a/tests/data/test1470
+++ b/tests/data/test1470
@@ -44,7 +44,7 @@ socks5unix
 HTTPS GET with host name using SOCKS5h via Unix sockets
 </name>
 <command>
-https://this.is.a.host.name:%HTTPSPORT/%TESTNUMBER -k --proxy socks5h://localhost%SOCKSUNIXPATH
+https://this.is.a.host.name:%HTTPSPORT/%TESTNUMBER --insecure --proxy socks5h://localhost%SOCKSUNIXPATH
 </command>
 </client>
 
diff --git a/tests/data/test1561 b/tests/data/test1561
index 7dbce1108b..1341d12130 100644
--- a/tests/data/test1561
+++ b/tests/data/test1561
@@ -72,7 +72,7 @@ https
 Cookies set over HTTP can't override secure ones
 </name>
 <command>
--k https://%HOSTIP:%HTTPSPORT/%TESTNUMBER0001 -L -c %LOGDIR/jar%TESTNUMBER.txt -H "Host: www.example.com"  http://%HOSTIP:%HTTPPORT/%TESTNUMBER0002 -L -c %LOGDIR/jar%TESTNUMBER.txt -H "Host: www.example.com"
+--insecure https://%HOSTIP:%HTTPSPORT/%TESTNUMBER0001 -L -c %LOGDIR/jar%TESTNUMBER.txt -H "Host: www.example.com"  http://%HOSTIP:%HTTPPORT/%TESTNUMBER0002 -L -c %LOGDIR/jar%TESTNUMBER.txt -H "Host: www.example.com"
 </command>
 </client>
 <verify>
diff --git a/tests/data/test1562 b/tests/data/test1562
index b9755aa248..88e442f7b2 100644
--- a/tests/data/test1562
+++ b/tests/data/test1562
@@ -44,7 +44,7 @@ https
 Expire secure cookies over HTTPS
 </name>
 <command>
--k https://%HOSTIP:%HTTPSPORT/%TESTNUMBER0001 -H "Host: www.example.com" https://%HOSTIP:%HTTPSPORT/%TESTNUMBER0002 -b "non-existing" https://%HOSTIP:%HTTPSPORT/%TESTNUMBER0001
+--insecure https://%HOSTIP:%HTTPSPORT/%TESTNUMBER0001 -H "Host: www.example.com" https://%HOSTIP:%HTTPSPORT/%TESTNUMBER0002 -b "non-existing" https://%HOSTIP:%HTTPSPORT/%TESTNUMBER0001
 </command>
 </client>
 <verify>
diff --git a/tests/data/test2400 b/tests/data/test2400
index ef7b126691..9d53f68b96 100644
--- a/tests/data/test2400
+++ b/tests/data/test2400
@@ -41,7 +41,7 @@ HTTP/2 GET over HTTPS
 <setenv>
 </setenv>
 <command>
--k --http2 "https://%HOSTIP:%HTTP2TLSPORT/%TESTNUMBER"
+--insecure --http2 "https://%HOSTIP:%HTTP2TLSPORT/%TESTNUMBER"
 </command>
 
 </client>
diff --git a/tests/data/test2401 b/tests/data/test2401
index 9929c1394b..8f686e8503 100644
--- a/tests/data/test2401
+++ b/tests/data/test2401
@@ -38,7 +38,7 @@ HTTP/2 POST over HTTPS
 <setenv>
 </setenv>
 <command>
--k --http2 "https://%HOSTIP:%HTTP2TLSPORT/%TESTNUMBER" -d "moo"
+--insecure --http2 "https://%HOSTIP:%HTTP2TLSPORT/%TESTNUMBER" -d "moo"
 </command>
 
 </client>
diff --git a/tests/data/test2403 b/tests/data/test2403
index 222f236d71..5901866265 100644
--- a/tests/data/test2403
+++ b/tests/data/test2403
@@ -42,7 +42,7 @@ HTTP/2 GET using %{header_json}
 <setenv>
 </setenv>
 <command>
--k --http2 -w '%{header_json}\n' "https://%HOSTIP:%HTTP2TLSPORT/%TESTNUMBER"
+--insecure --http2 -w '%{header_json}\n' "https://%HOSTIP:%HTTP2TLSPORT/%TESTNUMBER"
 </command>
 
 </client>
diff --git a/tests/data/test2406 b/tests/data/test2406
index 6bf4fa8cd9..bc6cc41ad2 100644
--- a/tests/data/test2406
+++ b/tests/data/test2406
@@ -40,7 +40,7 @@ HTTP/2 over HTTPS with -f
 <setenv>
 </setenv>
 <command>
--k --http2 -f "https://%HOSTIP:%HTTP2TLSPORT/%TESTNUMBER"
+--insecure --http2 -f "https://%HOSTIP:%HTTP2TLSPORT/%TESTNUMBER"
 </command>
 
 </client>
diff --git a/tests/data/test2501 b/tests/data/test2501
index 1f35372f1b..d05395754d 100644
--- a/tests/data/test2501
+++ b/tests/data/test2501
@@ -38,7 +38,7 @@ HTTP/3 POST
 <setenv>
 </setenv>
 <command>
--k --http3 "https://%HOSTIP:%HTTP3PORT/%TESTNUMBER" -d "moo"
+--insecure --http3 "https://%HOSTIP:%HTTP3PORT/%TESTNUMBER" -d "moo"
 </command>
 
 </client>
diff --git a/tests/data/test300 b/tests/data/test300
index 2eb5f11a6f..3dbf0f01d9 100644
--- a/tests/data/test300
+++ b/tests/data/test300
@@ -31,6 +31,7 @@ https
 <name>
 simple HTTPS GET
 </name>
+# Using '-k' over '--insecure' to also test the short form
 <command>
 -k https://%HOSTIP:%HTTPSPORT/%TESTNUMBER
 </command>
diff --git a/tests/data/test301 b/tests/data/test301
index a073011819..a195958988 100644
--- a/tests/data/test301
+++ b/tests/data/test301
@@ -33,7 +33,7 @@ https
 HTTPS GET with user and password
 </name>
 <command>
--k -u fake:user https://%HOSTIP:%HTTPSPORT/%TESTNUMBER
+--insecure -u fake:user https://%HOSTIP:%HTTPSPORT/%TESTNUMBER
 </command>
 </client>
 
diff --git a/tests/data/test302 b/tests/data/test302
index f6f33c276c..3f235b201b 100644
--- a/tests/data/test302
+++ b/tests/data/test302
@@ -33,7 +33,7 @@ https
 HTTPS GET over HTTP proxy fails
 </name>
 <command>
--k -U fake:user -x %HOSTIP:%HTTPPORT https://bad.fakeurl-to.test:%TESTNUMBER/slash/%TESTNUMBER
+--insecure -U fake:user -x %HOSTIP:%HTTPPORT https://bad.fakeurl-to.test:%TESTNUMBER/slash/%TESTNUMBER
 </command>
 </client>
 
diff --git a/tests/data/test303 b/tests/data/test303
index 9b656a7951..f2aad9dfb7 100644
--- a/tests/data/test303
+++ b/tests/data/test303
@@ -37,7 +37,7 @@ https
 HTTPS with 8 secs timeout
 </name>
 <command>
--k https://%HOSTIP:%HTTPSPORT/want/%TESTNUMBER -m 8
+--insecure https://%HOSTIP:%HTTPSPORT/want/%TESTNUMBER -m 8
 </command>
 </client>
 
diff --git a/tests/data/test304 b/tests/data/test304
index f5ba5153c3..2283192e22 100644
--- a/tests/data/test304
+++ b/tests/data/test304
@@ -31,7 +31,7 @@ https
 HTTPS multipart formpost
 </name>
 <command>
--k https://%HOSTIP:%HTTPSPORT/we/want/%TESTNUMBER -F name=daniel -F tool=curl -F file=@%LOGDIR/test%TESTNUMBER.txt
+--insecure https://%HOSTIP:%HTTPSPORT/we/want/%TESTNUMBER -F name=daniel -F tool=curl -F file=@%LOGDIR/test%TESTNUMBER.txt
 </command>
 # We create this file before the command is invoked!
 <file name="%LOGDIR/test%TESTNUMBER.txt">
diff --git a/tests/data/test306 b/tests/data/test306
index 463558e5ee..e0b5f90752 100644
--- a/tests/data/test306
+++ b/tests/data/test306
@@ -45,7 +45,7 @@ https
 HTTPS GET, receive no headers only data!
 </name>
 <command>
--k https://%HOSTIP:%HTTPSPORT/%TESTNUMBER --http0.9
+--insecure https://%HOSTIP:%HTTPSPORT/%TESTNUMBER --http0.9
 </command>
 </client>
 
diff --git a/tests/data/test307 b/tests/data/test307
index 475fdaee31..650daaea1c 100644
--- a/tests/data/test307
+++ b/tests/data/test307
@@ -36,7 +36,7 @@ https
 simple HTTPS GET with openssl engine
 </name>
 <command>
---engine openssl -k https://%HOSTIP:%HTTPSPORT/%TESTNUMBER
+--engine openssl --insecure https://%HOSTIP:%HTTPSPORT/%TESTNUMBER
 </command>
 </client>
 
diff --git a/tests/data/test308 b/tests/data/test308
index 39803d3b02..cdcbf7cb45 100644
--- a/tests/data/test308
+++ b/tests/data/test308
@@ -21,7 +21,7 @@ https
 simple HTTPS GET with invalid crypto engine
 </name>
 <command>
---engine invalid-crypto-engine-xyzzy -k https://%HOSTIP:%HTTPSPORT/%TESTNUMBER
+--engine invalid-crypto-engine-xyzzy --insecure https://%HOSTIP:%HTTPSPORT/%TESTNUMBER
 </command>
 </client>
 
diff --git a/tests/data/test309 b/tests/data/test309
index 29b3e30619..29058d4c96 100644
--- a/tests/data/test309
+++ b/tests/data/test309
@@ -59,7 +59,7 @@ https
 HTTP Location: redirect to HTTPS URL
 </name>
 <command>
--k http://%HOSTIP:%HTTPPORT/want/%TESTNUMBER -L
+--insecure http://%HOSTIP:%HTTPPORT/want/%TESTNUMBER -L
 </command>
 </client>
 
diff --git a/tests/data/test325 b/tests/data/test325
index 0baed5c04a..4f58262520 100644
--- a/tests/data/test325
+++ b/tests/data/test325
@@ -42,7 +42,7 @@ https
 HTTPS with attempted redirect to denied HTTP
 </name>
 <command>
--k https://%HOSTIP:%HTTPSPORT/%TESTNUMBER --proto-redir -http --location
+--insecure https://%HOSTIP:%HTTPSPORT/%TESTNUMBER --proto-redir -http --location
 </command>
 </client>
 
diff --git a/tests/data/test364 b/tests/data/test364
index 0e2ccd1514..5a02d70227 100644
--- a/tests/data/test364
+++ b/tests/data/test364
@@ -28,7 +28,7 @@ https
 HTTPS PUT of small file
 </name>
 <command>
--k https://%HOSTIP:%HTTPSPORT/we/want/%TESTNUMBER -T %LOGDIR/test%TESTNUMBER.txt
+--insecure https://%HOSTIP:%HTTPSPORT/we/want/%TESTNUMBER -T %LOGDIR/test%TESTNUMBER.txt
 </command>
 <file name="%LOGDIR/test%TESTNUMBER.txt">
 %repeat[200 x banana]%
diff --git a/tests/data/test400 b/tests/data/test400
index e20774a4d0..47fdd49e3e 100644
--- a/tests/data/test400
+++ b/tests/data/test400
@@ -38,7 +38,7 @@ ftps
 FTPS dir list PASV unencrypted data
 </name>
 <command>
--k --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/
+--insecure --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/
 </command>
 </client>
 
diff --git a/tests/data/test401 b/tests/data/test401
index 5124447d84..8ff16a5c0d 100644
--- a/tests/data/test401
+++ b/tests/data/test401
@@ -28,7 +28,7 @@ works
   so does it?
 </file>
 <command>
--k --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/%TESTNUMBER -T %LOGDIR/test%TESTNUMBER.txt
+--insecure --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/%TESTNUMBER -T %LOGDIR/test%TESTNUMBER.txt
 </command>
 </client>
 
diff --git a/tests/data/test402 b/tests/data/test402
index 86283749a4..a62267dd15 100644
--- a/tests/data/test402
+++ b/tests/data/test402
@@ -19,7 +19,7 @@ ftp
 FTP SSL required on non-SSL server
 </name>
 <command>
--k --ftp-ssl-reqd ftp://%HOSTIP:%FTPPORT/%TESTNUMBER
+--insecure --ftp-ssl-reqd ftp://%HOSTIP:%FTPPORT/%TESTNUMBER
 </command>
 </client>
 
diff --git a/tests/data/test403 b/tests/data/test403
index 7c08d5ca86..f451bf8f43 100644
--- a/tests/data/test403
+++ b/tests/data/test403
@@ -40,7 +40,7 @@ ftps
 FTPS with CCC not supported by server
 </name>
 <command>
--k --ftp-ssl-control --ftp-ssl-ccc ftps://%HOSTIP:%FTPSPORT/
+--insecure --ftp-ssl-control --ftp-ssl-ccc ftps://%HOSTIP:%FTPSPORT/
 </command>
 </client>
 
diff --git a/tests/data/test405 b/tests/data/test405
index 90369b8ade..c39bb3aef1 100644
--- a/tests/data/test405
+++ b/tests/data/test405
@@ -19,7 +19,7 @@ ftp
 FTPS operation to FTP port
 </name>
 <command>
--m 5 -k ftps://%HOSTIP:%FTPPORT/path/to/file/%TESTNUMBER
+-m 5 --insecure ftps://%HOSTIP:%FTPPORT/path/to/file/%TESTNUMBER
 </command>
 </client>
 
diff --git a/tests/data/test406 b/tests/data/test406
index db497bf6c4..9cd5047d85 100644
--- a/tests/data/test406
+++ b/tests/data/test406
@@ -38,7 +38,7 @@ ftps
 FTPS dir list, PORT with specified IP
 </name>
 <command>
--k --ftp-ssl-control -P %CLIENTIP ftps://%HOSTIP:%FTPSPORT/
+--insecure --ftp-ssl-control -P %CLIENTIP ftps://%HOSTIP:%FTPSPORT/
 </command>
 </client>
 
diff --git a/tests/data/test407 b/tests/data/test407
index 8b35a9f2b3..33a07cd126 100644
--- a/tests/data/test407
+++ b/tests/data/test407
@@ -29,7 +29,7 @@ ftps
 Get two FTPS files from the same remote dir: no second CWD
 </name>
 <command>
--k --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/a/path/%TESTNUMBER ftps://%HOSTIP:%FTPSPORT/a/path/%TESTNUMBER
+--insecure --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/a/path/%TESTNUMBER ftps://%HOSTIP:%FTPSPORT/a/path/%TESTNUMBER
 </command>
 <stdout>
 data blobb
diff --git a/tests/data/test408 b/tests/data/test408
index 594eb01aa7..13c9c51179 100644
--- a/tests/data/test408
+++ b/tests/data/test408
@@ -25,7 +25,7 @@ ftps
 FTPS PORT upload with CWD
 </name>
 <command>
--k --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/CWD/STOR/RETR/%TESTNUMBER -T %LOGDIR/upload%TESTNUMBER -P -
+--insecure --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/CWD/STOR/RETR/%TESTNUMBER -T %LOGDIR/upload%TESTNUMBER -P -
 </command>
 <file name="%LOGDIR/upload%TESTNUMBER">
 Moooooooooooo
diff --git a/tests/data/test409 b/tests/data/test409
index a1f9029332..f7a014248c 100644
--- a/tests/data/test409
+++ b/tests/data/test409
@@ -28,7 +28,7 @@ works
   so does it?
 </file>
 <command>
--k --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/%TESTNUMBER -T %LOGDIR/test%TESTNUMBER.txt
+--insecure --ftp-ssl-control ftps://%HOSTIP:%FTPSPORT/%TESTNUMBER -T %LOGDIR/test%TESTNUMBER.txt
 </command>
 </client>
 
diff --git a/tests/data/test410 b/tests/data/test410
index 79d12def68..f947fcdc1d 100644
--- a/tests/data/test410
+++ b/tests/data/test410
@@ -36,7 +36,7 @@ HTTPS GET with very long request header
 Long: %repeat[3500 x header content]%
 </file>
 <command>
--k https://%HOSTIP:%HTTPSPORT/%TESTNUMBER -H @%LOGDIR/file%TESTNUMBER
+--insecure https://%HOSTIP:%HTTPSPORT/%TESTNUMBER -H @%LOGDIR/file%TESTNUMBER
 </command>
 </client>
 
diff --git a/tests/data/test414 b/tests/data/test414
index 391ed0d06e..8a697ae125 100644
--- a/tests/data/test414
+++ b/tests/data/test414
@@ -55,7 +55,7 @@ https
 HTTPS sec-cookie, HTTP redirect, same name cookie, redirect back
 </name>
 <command>
-https://attack.invalid:%HTTPSPORT/a/b/%TESTNUMBER -k -c %LOGDIR/cookie%TESTNUMBER --resolve attack.invalid:%HTTPSPORT:%HOSTIP --resolve attack.invalid:%HTTPPORT:%HOSTIP -L
+https://attack.invalid:%HTTPSPORT/a/b/%TESTNUMBER --insecure -c %LOGDIR/cookie%TESTNUMBER --resolve attack.invalid:%HTTPSPORT:%HOSTIP --resolve attack.invalid:%HTTPPORT:%HOSTIP -L
 </command>
 </client>
 
diff --git a/tests/data/test445 b/tests/data/test445
index 4e12367d83..d573077b15 100644
--- a/tests/data/test445
+++ b/tests/data/test445
@@ -46,7 +46,7 @@ http-proxy
 Refuse tunneling protocols through HTTP proxy
 </name>
 <command>
--x http://%HOSTIP:%PROXYPORT/%TESTNUMBER -p gopher://127.0.0.1 dict://127.0.0.1 http://moo https://example telnet://another ftp://yes ftps://again imap://more ldap://perhaps mqtt://yes pop3://mail rtsp://harder scp://copy sftp://files smb://wird smtp://send -k
+-x http://%HOSTIP:%PROXYPORT/%TESTNUMBER -p gopher://127.0.0.1 dict://127.0.0.1 http://moo https://example telnet://another ftp://yes ftps://again imap://more ldap://perhaps mqtt://yes pop3://mail rtsp://harder scp://copy sftp://files smb://wird smtp://send --insecure
 </command>
 </client>
 
diff --git a/tests/data/test474 b/tests/data/test474
index 37e0805b5e..fc5575d71b 100644
--- a/tests/data/test474
+++ b/tests/data/test474
@@ -38,7 +38,7 @@ https
 -w urle.scheme after HTTP to HTTPS redirect
 </name>
 <command option="no-include">
--k -L http://%HOSTIP:%HTTPPORT/%TESTNUMBER -w "%{num_redirects} %{url_effective} %{urle.scheme}\n"
+--insecure -L http://%HOSTIP:%HTTPPORT/%TESTNUMBER -w "%{num_redirects} %{url_effective} %{urle.scheme}\n"
 </command>
 </client>
 
diff --git a/tests/data/test628 b/tests/data/test628
index a1407e4a85..b010d03045 100644
--- a/tests/data/test628
+++ b/tests/data/test628
@@ -16,7 +16,7 @@ sftp
 SFTP invalid user login (password authentication)
 </name>
 <command>
--u not-a-valid-user: sftp://%HOSTIP:%SSHPORT%SSH_PWD/irrelevant-file  --insecure
+-u not-a-valid-user: sftp://%HOSTIP:%SSHPORT%SSH_PWD/irrelevant-file --insecure
 </command>
 </client>
 
diff --git a/tests/data/test780 b/tests/data/test780
index 567b6684d0..f65f793c7d 100644
--- a/tests/data/test780
+++ b/tests/data/test780
@@ -53,7 +53,7 @@ this.hsts.example "99991001 04:47:41"
 HSTS with updated expiry in response
 </name>
 <command>
--x http://%HOSTIP:%PROXYPORT http://this.hsts.example:%HTTPSPORT/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER -k
+-x http://%HOSTIP:%PROXYPORT http://this.hsts.example:%HTTPSPORT/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER --insecure
 </command>
 <disable>
 test-duphandle
diff --git a/tests/data/test781 b/tests/data/test781
index 4892415bf4..20db3852bc 100644
--- a/tests/data/test781
+++ b/tests/data/test781
@@ -55,7 +55,7 @@ this.hsts.example "99991001 04:47:41"
 HSTS update expiry, with parent includeSubDomains domain present
 </name>
 <command>
--x http://%HOSTIP:%PROXYPORT http://this.hsts.example:%HTTPSPORT/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER -k
+-x http://%HOSTIP:%PROXYPORT http://this.hsts.example:%HTTPSPORT/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER --insecure
 </command>
 <disable>
 test-duphandle
diff --git a/tests/data/test782 b/tests/data/test782
index 6a53081ab6..61b4a0b8c2 100644
--- a/tests/data/test782
+++ b/tests/data/test782
@@ -55,7 +55,7 @@ CURL_TIME=1728465947
 HSTS update expiry, with two includeSubDomains domains present
 </name>
 <command>
--x http://%HOSTIP:%PROXYPORT http://this.hsts.example:%HTTPSPORT/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER -k
+-x http://%HOSTIP:%PROXYPORT http://this.hsts.example:%HTTPSPORT/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER --insecure
 </command>
 <disable>
 test-duphandle
diff --git a/tests/data/test783 b/tests/data/test783
index f12cc4507d..1f888738ed 100644
--- a/tests/data/test783
+++ b/tests/data/test783
@@ -55,7 +55,7 @@ CURL_TIME=1728465947
 HSTS update expiry, removing includesubdomains in update
 </name>
 <command>
--x http://%HOSTIP:%PROXYPORT http://this.hsts.example:%HTTPSPORT/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER -k
+-x http://%HOSTIP:%PROXYPORT http://this.hsts.example:%HTTPSPORT/%TESTNUMBER --hsts %LOGDIR/input%TESTNUMBER --insecure
 </command>
 <disable>
 test-duphandle
diff --git a/tests/data/test987 b/tests/data/test987
index bf926b7fe2..ae69b8de87 100644
--- a/tests/data/test987
+++ b/tests/data/test987
@@ -26,7 +26,7 @@ To: another
 body
 </stdin>
 <command>
--k --ssl-reqd --mail-rcpt recipient@example.com --mail-from sender@example.com -T - smtps://%HOSTIP:%SMTPSPORT/%TESTNUMBER
+--insecure --ssl-reqd --mail-rcpt recipient@example.com --mail-from sender@example.com -T - smtps://%HOSTIP:%SMTPSPORT/%TESTNUMBER
 </command>
 </client>
 
diff --git a/tests/data/test988 b/tests/data/test988
index 31e1c8711b..46b09fff94 100644
--- a/tests/data/test988
+++ b/tests/data/test988
@@ -30,7 +30,7 @@ imaps
 IMAPS FETCH with redundant explicit SSL request
 </name>
 <command>
--k --ssl-reqd -u '"user:sec"ret{' 'imaps://%HOSTIP:%IMAPSPORT/%TESTNUMBER/;MAILINDEX=1'
+--insecure --ssl-reqd -u '"user:sec"ret{' 'imaps://%HOSTIP:%IMAPSPORT/%TESTNUMBER/;MAILINDEX=1'
 </command>
 </client>
 
diff --git a/tests/data/test989 b/tests/data/test989
index fa41240a20..c7bf249460 100644
--- a/tests/data/test989
+++ b/tests/data/test989
@@ -30,7 +30,7 @@ pop3s
 POP3S RETR with redundant explicit SSL request
 </name>
 <command>
--k --ssl-reqd  -u user:secret pop3s://%HOSTIP:%POP3SPORT/%TESTNUMBER
+--insecure --ssl-reqd  -u user:secret pop3s://%HOSTIP:%POP3SPORT/%TESTNUMBER
 </command>
 </client>