diff --git a/pkg/ueps/reader.go b/pkg/ueps/reader.go
index 1a0ff49..eab2b82 100644
--- a/pkg/ueps/reader.go
+++ b/pkg/ueps/reader.go
@@ -85,7 +85,7 @@ func ReadAndVerify(reader *bufio.Reader, sharedSecret []byte) (*ParsedPacket, er
 		case TagHMAC:
 			hmacSignature = tagValue
 		default:
-			// unknown tags contribute to HMAC coverage, blocking tag-injection attacks
+			// signedData.Write([]byte{tagType, tagValueLength}); signedData.Write(tagValue) — unknown tags included in HMAC
 			signedData.WriteByte(tagType)
 			signedData.WriteByte(tagValueLength)
 			signedData.Write(tagValue)