Using TLS 1.3 and OpenVPN 2.4.7 new features on Eddie / Win10

[sh4rp87 0]

I'm using Eddie on Windows 10, running OpenVPN 2.4.7 (released 21 Feb. 2019) that I setup as external openvpn.exe.
Which directives can I enable to use TLS 1.3? Are there also others useful directives we can use on the new OpenVPN to further increase security (for example --tls-crypt)?
Do the AirVPN servers support these new fatures?

A call out to the experts, a sorry in advance if this has been discussed already.

[zhang888 1067]

Not all clients support it, only in OpenVPN 2.4.7 there was an official support for this from the OpenVPN side,
but still OpenSSL needs to be either recompiled and relinked against it or pulled from unstable repos.

Definitely in the roadmap but technically, the benefits of TLS 1.3 are not so significant for OpenVPN usage.
Faster handshakes and 0RTT are almost irrelevant since it's only done once and the rest are in the background
while it is running, so won't be visible for the user unlike fast loading web pages. As for security, it does disable old
ciphers but they were never used in AirVPN anyway.
Handshake messages after ServerHello are already encrypted with --tls-crypt on clients > 2.4.
Compression, custom DHE groups, and DSA are not relavant in OpenVPN as well.
Probably before the end of the year it will become a new standard, not because it is better, but because
it will be well implemented by more clients and servers and there won't be a reason not to default to it.
Same thing regarding web servers, the current slow rollup plan for TLS 1.3 on the web is Q4 2019,
according to many webmaster forums unofficial statistic.