diff --git a/core/java/src/net/i2p/util/I2PSSLSocketFactory.java b/core/java/src/net/i2p/util/I2PSSLSocketFactory.java
index e3cb345abbab71b9a1149a411e99cf8464bc0f06..23252bb5b3e04b21d22e719e361fa8b81b7af908 100644
--- a/core/java/src/net/i2p/util/I2PSSLSocketFactory.java
+++ b/core/java/src/net/i2p/util/I2PSSLSocketFactory.java
@@ -132,7 +132,12 @@ public class I2PSSLSocketFactory {
     /**
      *  Java 7 does not enable 1.1 or 1.2 by default on the client side.
      *  Java 8 does enable 1.1 and 1.2 by default on the client side.
-     *  1.3 in Java 11.
+     *  1.3 in Java 11, but it requires:
+     *    ChaCha20/Poly1305 in Java 12 (we could add a provider)
+     *    X25519 in Java 13 but may be pulled in to 12 (can't use our unsigned provider)
+     *    Ed25519 in Java 13 (but we can use our provider)
+     *    ref: https://openjdk.java.net/jeps/332
+     *
      *  ref: http://docs.oracle.com/javase/7/docs/technotes/guides/security/SunProviders.html
      *  Unmodifiable.
      *  Public for RouterConsoleRunner.