diff --git a/README.md b/README.md
index de04c07..ed432ea 100644
--- a/README.md
+++ b/README.md
@@ -50,6 +50,8 @@ The Flask API portion listens for webhooks from a compatible Git system, and the
    $ bbuilder --listen-addr 127.0.0.1 --listen-port 4000
    ```
 
+   **NOTE:** The API server does *not* use TLS/HTTPS. If you need SSL - and you do if this webhook will traverse the public Internet - add a reverse proxy in front of the API.
+
 1. Run a worker with the following command:
 
    ```