diff --git a/pkg/ueps/reader.go b/pkg/ueps/reader.go
index ab8f5df..1a0ff49 100644
--- a/pkg/ueps/reader.go
+++ b/pkg/ueps/reader.go
@@ -85,7 +85,7 @@ func ReadAndVerify(reader *bufio.Reader, sharedSecret []byte) (*ParsedPacket, er
 		case TagHMAC:
 			hmacSignature = tagValue
 		default:
-			// signedData.WriteByte(tagType); signedData.WriteByte(tagValueLength); signedData.Write(tagValue) — unknown tags contribute to HMAC, blocking injection
+			// unknown tags contribute to HMAC coverage, blocking tag-injection attacks
 			signedData.WriteByte(tagType)
 			signedData.WriteByte(tagValueLength)
 			signedData.Write(tagValue)