diff --git a/ipn/prefs.go b/ipn/prefs.go
index 71a80b182..2eb0ccf0c 100644
--- a/ipn/prefs.go
+++ b/ipn/prefs.go
@@ -158,11 +158,10 @@ type Prefs struct {
 	// connections. This overrides tailcfg.Hostinfo's ShieldsUp.
 	ShieldsUp bool
 
-	// AdvertiseTags specifies groups that this node wants to join, for
-	// purposes of ACL enforcement. These can be referenced from the ACL
-	// security policy. Note that advertising a tag doesn't guarantee that
-	// the control server will allow you to take on the rights for that
-	// tag.
+	// AdvertiseTags specifies tags that should be applied to this node, for
+	// purposes of ACL enforcement. These can be referenced from the ACL policy
+	// document. Note that advertising a tag on the client doesn't guarantee
+	// that the control server will allow the node to adopt that tag.
 	AdvertiseTags []string
 
 	// Hostname is the hostname to use for identifying the node. If
diff --git a/tsnet/tsnet.go b/tsnet/tsnet.go
index 8f2f7bdcd..4cb977c73 100644
--- a/tsnet/tsnet.go
+++ b/tsnet/tsnet.go
@@ -124,11 +124,10 @@ type Server struct {
 	// field at zero unless you know what you are doing.
 	Port uint16
 
-	// AdvertiseTags specifies groups that this embedded server wants to join, for
-	// purposes of ACL enforcement. These can be referenced from the ACL
-	// security policy. Note that advertising a tag doesn't guarantee that
-	// the control server will allow you to take on the rights for that
-	// tag.
+	// AdvertiseTags specifies tags that should be applied to this node, for
+	// purposes of ACL enforcement. These can be referenced from the ACL policy
+	// document. Note that advertising a tag on the client doesn't guarantee
+	// that the control server will allow the node to adopt that tag.
 	AdvertiseTags []string
 
 	getCertForTesting func(*tls.ClientHelloInfo) (*tls.Certificate, error)