Sigh. I'm leading an effort to cleanup TLS company wide and it's a nightmare.

I get why some people want middleboxes but honestly, I'd rather TLS1.3 take the opportunity to clean things up instead of coming up with workarounds for fallback.