diff --git a/src/fetchers/quickinstall.rs b/src/fetchers/quickinstall.rs
index 120dd6cb..591bb6dc 100644
--- a/src/fetchers/quickinstall.rs
+++ b/src/fetchers/quickinstall.rs
@@ -7,13 +7,10 @@ use tokio::task::JoinHandle;
 use url::Url;
 
 use super::Data;
-use crate::{
-    download_and_extract, new_reqwest_client_builder, remote_exists, BinstallError, PkgFmt,
-};
+use crate::{download_and_extract, get_reqwest_client, remote_exists, BinstallError, PkgFmt};
 
 const BASE_URL: &str = "https://github.com/alsuren/cargo-quickinstall/releases/download";
 const STATS_URL: &str = "https://warehouse-clerk-tmp.vercel.app/api/crate";
-const USER_AGENT: &str = concat!(env!("CARGO_PKG_NAME"), "/", env!("CARGO_PKG_VERSION"));
 
 pub struct QuickInstall {
     package: String,
@@ -91,9 +88,7 @@ impl QuickInstall {
             let url = Url::parse(&stats_url)?;
             debug!("Sending installation report to quickinstall ({url})");
 
-            new_reqwest_client_builder()
-                .user_agent(USER_AGENT)
-                .build()?
+            get_reqwest_client()
                 .request(Method::HEAD, url.clone())
                 .send()
                 .await
diff --git a/src/helpers.rs b/src/helpers.rs
index d48e97b6..73a553bd 100644
--- a/src/helpers.rs
+++ b/src/helpers.rs
@@ -35,15 +35,6 @@ pub use path_ext::*;
 mod tls_version;
 pub use tls_version::TLSVersion;
 
-#[derive(Debug)]
-pub struct ReqwestConfig {
-    pub secure: bool,
-    pub min_tls: Option<tls::Version>,
-}
-
-/// (secure mode, min TLS version)
-pub static REQWESTGLOBALCONFIG: OnceCell<ReqwestConfig> = OnceCell::new();
-
 /// Load binstall metadata from the crate `Cargo.toml` at the provided path
 pub fn load_manifest_path<P: AsRef<Path>>(
     manifest_path: P,
@@ -59,30 +50,42 @@ pub fn load_manifest_path<P: AsRef<Path>>(
     })
 }
 
-pub fn new_reqwest_client_builder() -> ClientBuilder {
-    let mut builder = ClientBuilder::new();
+static CLIENT: OnceCell<Client> = OnceCell::new();
 
-    if let Some(ReqwestConfig { secure, min_tls }) = REQWESTGLOBALCONFIG.get() {
-        if *secure {
-            builder = builder
-                .https_only(true)
-                .min_tls_version(tls::Version::TLS_1_2)
-        }
+/// Should only be called once in main::entry.
+pub fn initialize_reqwest_client(
+    secure: bool,
+    min_tls: Option<tls::Version>,
+) -> Result<(), BinstallError> {
+    const USER_AGENT: &str = concat!(env!("CARGO_PKG_NAME"), "/", env!("CARGO_PKG_VERSION"));
 
-        if let Some(ver) = *min_tls {
-            builder = builder.min_tls_version(ver);
-        }
+    let mut builder = ClientBuilder::new().user_agent(USER_AGENT);
+
+    if secure {
+        builder = builder
+            .https_only(true)
+            .min_tls_version(tls::Version::TLS_1_2);
     }
 
-    builder
+    if let Some(ver) = min_tls {
+        builder = builder.min_tls_version(ver);
+    }
+
+    let client = builder.build()?;
+
+    CLIENT
+        .set(client)
+        .expect("Reqwest client already initialized");
+
+    Ok(())
 }
 
-pub fn new_reqwest_client() -> reqwest::Result<Client> {
-    new_reqwest_client_builder().build()
+pub fn get_reqwest_client() -> &'static Client {
+    CLIENT.get().expect("Reqwest client is not initialized")
 }
 
 pub async fn remote_exists(url: Url, method: Method) -> Result<bool, BinstallError> {
-    let req = new_reqwest_client()?
+    let req = get_reqwest_client()
         .request(method.clone(), url.clone())
         .send()
         .await
@@ -95,7 +98,7 @@ async fn create_request(
 ) -> Result<impl Stream<Item = reqwest::Result<Bytes>>, BinstallError> {
     debug!("Downloading from: '{url}'");
 
-    new_reqwest_client()?
+    get_reqwest_client()
         .get(url.clone())
         .send()
         .await
diff --git a/src/main.rs b/src/main.rs
index 5a155bad..506cc478 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -200,13 +200,8 @@ async fn entry() -> Result<()> {
         bin_dir: opts.bin_dir.take(),
     };
 
-    // Initialize REQWESTGLOBALCONFIG
-    REQWESTGLOBALCONFIG
-        .set(ReqwestConfig {
-            secure: opts.secure,
-            min_tls: opts.min_tls_version.map(|v| v.into()),
-        })
-        .unwrap();
+    // Initialize reqwest client
+    initialize_reqwest_client(opts.secure, opts.min_tls_version.map(|v| v.into()))?;
 
     // Setup logging
     let mut log_config = ConfigBuilder::new();