URLConnection uses OS implemented sockets for http requests. What that means is that it will use whatever the OS is capable of, but that does leave you at the mercy of the versions of the OS that your clients are running. For instance, Windows 7 does not enable TLSv1.2 by default, but it can be enabled by the user and, if my memory is correct, by a registry entry.