https://docs.aws.amazon.com/AmazonCloudFront/latest/Develope...
However HN is not using CloudFront - so this doesn't matter for evaluating why HN is not supporting TLS1.3