Backport TLS1.3 patches

Consider backporting TLS 1.3 patches for NSS and Firefox (after they land) onto Tor Browser 8 (ESR60). It seems like almost all the patches are within NSS.

https://bugzilla.mozilla.org/show_bug.cgi?id=1057463

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information