diff --git a/internal/waf/waf.go b/internal/waf/waf.go
index 9d5ed66..d624946 100644
--- a/internal/waf/waf.go
+++ b/internal/waf/waf.go
@@ -213,10 +213,10 @@ func (h *handler) answerQuestion(w http.ResponseWriter, r *http.Request) {
 
 // readQuestion returns the visitor's address and the body a question carries,
 // and whether waf takes the question. It answers a question it does not
-// take with 400 and no disposition, which rproxy treats as it treats no
-// answer. The id of a question it takes is held from here on, without a
-// decision yet, so that another question with that id is refused while this
-// one is being handled.
+// take with 400 and no disposition. rproxy passes that 400 to the visitor,
+// and SWRP_DEFAULT_DISPOSITION does not apply. The id of a question waf takes
+// is held from here on, without a decision yet, so that another question with
+// that id is refused while this one is being handled.
 //
 // The body is read before any check, since Go's server does not send an answer
 // until it has read the body. A question whose body stops arriving gets no