Gemini allows clients to function without TLS, but it limits their access/functionality.

I'd be very interested in seeing an attempt at a minimal, portable standalone implementation of TLS suitable for Gemini's needs.