Reported at: http://mail.openjdk.java.net/pipermail/security-dev/2014-October/011325.html The JCE algorithm specification http://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html states for TLS: "... The Java SE 7 release supports endpoint identification algorithms for TLS 1.2. The algorithm name can be passed to the setEndpointIdentificationAlgorithm() method of javax.net.ssl.SSLParameters...." The endpoint identification algorithms apply to all TLS protocols. Should not have the "for TLS 1.2" words in the doc.