No - it's enabled by default for all available security policies. CloudFront allows to configure the minimum TLS version - the maximum is always TLS1.3. https:

No - it's enabled by default for all available security policies. CloudFront allows to configure the minimum TLS version - the maximum is always TLS1.3. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html https://docs.aws.amazon.com/AmazonCloudFront/latest/Develope... However HN is not using CloudFront - so this doesn't matter for evaluating why HN is not supporting TLS1.3