https://caniuse.com/#feat=tls1-3
If your API clients are diverse, turning off pre-TLS1.2 versions even now will probably break a lot of them.
https://caniuse.com/#feat=tls1-3