diff --git a/docs/sample_config.yaml b/docs/sample_config.yaml
index 9c74dcd186..58f2fa0810 100644
--- a/docs/sample_config.yaml
+++ b/docs/sample_config.yaml
@@ -267,8 +267,9 @@ listeners:
 # Skip federation certificate verification on the following whitelist
 # of domains.
 #
-# This setting should only normally be used within a private network of
-# homeservers.
+# This setting should only be used in very specific cases, such as
+# federation over Tor hidden services and similar. For private networks
+# of homeservers, you likely want to use a private CA instead.
 #
 # Only effective if federation_verify_certicates is `true`.
 #