Avoid vague "previous versions", and state TLS versions explicitly

Several places in the spec referred to "previous versions..." but were
imported from TLS 1.2's spec -- we should mention which versions
explicitly, to avoid ambiguity about whether these refer to TLS 1.2 or
TLS 1.3.