Hacker News Reader

The author does not consider that a filter can block TLS 1.3 and force apps to continue using TLS 1.2.

The downgrade protection in 1.3 is supposedly much better than 1.2, https://tools.ietf.org/html/rfc8446#section-4.1.3