WFCORE-4172 added support for TLS 1.3 but left TLS 1.3 disabled by default for reasons described in WFWIP-160:
Once we are ready to do so, we should enable TLS 1.3 by default.
Enable TLS 1.3 by default
Fix throughput and response time differences between TLS 1.2 and TLS 1.3
Add support for TLS 1.3
Enable TLS 1.3 by default for the WildFly OpenSSL provider