[tptacek]

I don't think this is the big issue banks have with TLS 1.3. Nick Lamb's sibling comment is, I think, the crux of this issue.