diff --git a/docs/v0.3_quickstart.md b/docs/v0.3_quickstart.md
index 85179ad2..465a42fb 100644
--- a/docs/v0.3_quickstart.md
+++ b/docs/v0.3_quickstart.md
@@ -21,7 +21,7 @@ You'll need that generated password (`XO0xHp75uuyeireO2xmmVlK91T7B9fpD`) when bu
 
 ## Configure the Controller
 
-Create a controller configuration file in `etc/ctrl.yml`.
+Create a controller configuration file in `etc/ctrl.yml`. The controller does not provide server TLS, but you may front the server with a reverse proxy. This example will expose the non-TLS listener for the controller.
 
 ```yaml
 #    _____ __ ___ | | __
@@ -144,7 +144,7 @@ Now our `zrok` controller is fully configured.
 
 ## Configure the Public Frontend
 
-Create `etc/http-frontend.yml`. You must reiterate the pattern you expressed in the public frontend URL template as a `host_match` pattern, and you may change the default address where the frontend will listen for public access requests.
+Create `etc/http-frontend.yml`. You must reiterate the pattern you expressed in the public frontend URL template as a `host_match` pattern, and you may change the default address where the frontend will listen for public access requests. The frontend does not provide server TLS, but you may front the server with a reverse proxy. This example will expose the non-TLS listener for the frontend.
 
 ```yaml
 host_match: zrok.quigley.com