diff --git a/book/source/04-certificates.md b/book/source/04-certificates.md
index 986cc14..0538595 100644
--- a/book/source/04-certificates.md
+++ b/book/source/04-certificates.md
@@ -114,8 +114,7 @@ Commonly used key flags include:
 - **Authentication**: primarily used for OpenPGP authentication
 
 ```{note}
-
-In line with best practices, distinct component keys should handle specific operations. The primary key should be reserved solely for certification, while separate subkeys should be used for signing, encryption, and authentication. Notably, in many algorithms, encryption capability is exclusive and cannot overlap with other operations[^key-flag-sharing]).
+Distinct component keys handle specific operations. The primary key is reserved solely for certification, while separate subkeys are used for signing, encryption, and authentication. Subkeys lack certification capability. Notably, in many algorithms, encryption capability is exclusive and cannot overlap with other operations[^key-flag-sharing]).
 ```
 
 [^key-flag-sharing]: With ECC algorithms, it's impossible to combine encryption functions with those intended for signing. For example,  ed25519 is specifically used for signing; cv25519 is designated for encryption.