Only allow TLSv1.3

[icebluey]

Is there a way to use only TLSv1.3 for DoH servers?

[jedisct1]

I think TLS 1.3 will always be used if the server supports it.

And the insecure options from TLS 1.2 are disabled, so even if TLS 1.2 is the only supported version, you should be fine.