diff --git a/Cargo.toml b/Cargo.toml
index 780549e..ccc686d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -88,6 +88,13 @@ eframe = { version = "0.19.0", default-features = false, features = ["glow"] }
 #
 # https://gitlab.torproject.org/tpo/core/arti/-/issues/715
 tls-api-openssl = "0.9.0"
+# `arti-client` with `static` doesn't actually
+# statically link OpenSSL on macOS, both x64 + ARM.
+# Should probably file a bug report.
+openssl = { version = "0.10", features = ["vendored"] }
+# We don't even use `xz` in `flate2` but this gets dynamically
+# linked as well which causes problems, so statically link it.
+lzma-sys = { version = "0.1.20", features = ["static"] }
 
 # Windows/Linux Tor
 [target.'cfg(not(target_os = "macos"))'.dependencies]
diff --git a/README.md b/README.md
index 62feaf0..d843daf 100644
--- a/README.md
+++ b/README.md
@@ -638,7 +638,7 @@ Due to an issue with some [TLS code](https://gitlab.torproject.org/tpo/core/arti
 
 These are statically linked into Gupax, so you'll need to have them on your system:
 ```bash
-brew install pkg-config openssl
+brew install pkg-config openssl xz
 ```
 
 If you want the binary to have an icon, you must use [`cargo-bundle`](https://github.com/burtonageo/cargo-bundle):