diff --git a/envoy/api/v2/auth/cert.proto b/envoy/api/v2/auth/cert.proto
index 0f331268..87e80b49 100644
--- a/envoy/api/v2/auth/cert.proto
+++ b/envoy/api/v2/auth/cert.proto
@@ -386,7 +386,8 @@ message DownstreamTlsContext {
 message SdsSecretConfig {
   // Name (FQDN, UUID, SPKI, SHA256, etc.) by which the secret can be uniquely referred to.
   // When both name and config are specified, then secret can be fetched and/or reloaded via SDS.
-  // When only name is specified, then secret will be loaded from static resources [V2-API-DIFF].
+  // When only name is specified, then secret will be loaded from static
+  // resources.
   string name = 1;
   core.ConfigSource sds_config = 2;
 }
diff --git a/envoy/api/v2/lds.proto b/envoy/api/v2/lds.proto
index aec4ad85..a26d64ca 100644
--- a/envoy/api/v2/lds.proto
+++ b/envoy/api/v2/lds.proto
@@ -93,10 +93,10 @@ message Listener {
     // bind can only receive connections redirected from other listeners that
     // set use_original_dst parameter to true. Default is true.
     //
-    // [V2-API-DIFF] This is deprecated in v2, all Listeners will bind to their
-    // port. An additional filter chain must be created for every original
-    // destination port this listener may redirect to in v2, with the original
-    // port specified in the FilterChainMatch destination_port field.
+    // This is deprecated in v2, all Listeners will bind to their port. An
+    // additional filter chain must be created for every original destination
+    // port this listener may redirect to in v2, with the original port
+    // specified in the FilterChainMatch destination_port field.
     //
     // [#comment:TODO(PiotrSikora): Remove this once verified that we no longer need it.]
     google.protobuf.BoolValue bind_to_port = 1;
diff --git a/envoy/api/v3alpha/auth/cert.proto b/envoy/api/v3alpha/auth/cert.proto
index 83897b26..5fbd199e 100644
--- a/envoy/api/v3alpha/auth/cert.proto
+++ b/envoy/api/v3alpha/auth/cert.proto
@@ -386,7 +386,7 @@ message DownstreamTlsContext {
 message SdsSecretConfig {
   // Name (FQDN, UUID, SPKI, SHA256, etc.) by which the secret can be uniquely referred to.
   // When both name and config are specified, then secret can be fetched and/or reloaded via SDS.
-  // When only name is specified, then secret will be loaded from static resources [V2-API-DIFF].
+  // When only name is specified, then secret will be loaded from static resources.
   string name = 1;
   core.ConfigSource sds_config = 2;
 }
diff --git a/envoy/api/v3alpha/lds.proto b/envoy/api/v3alpha/lds.proto
index 794b25a4..e9e2b9a5 100644
--- a/envoy/api/v3alpha/lds.proto
+++ b/envoy/api/v3alpha/lds.proto
@@ -93,10 +93,10 @@ message Listener {
     // bind can only receive connections redirected from other listeners that
     // set use_original_dst parameter to true. Default is true.
     //
-    // [V2-API-DIFF] This is deprecated in v2, all Listeners will bind to their
-    // port. An additional filter chain must be created for every original
-    // destination port this listener may redirect to in v2, with the original
-    // port specified in the FilterChainMatch destination_port field.
+    // This is deprecated in v2, all Listeners will bind to their port. An
+    // additional filter chain must be created for every original destination
+    // port this listener may redirect to in v2, with the original port
+    // specified in the FilterChainMatch destination_port field.
     //
     // [#comment:TODO(PiotrSikora): Remove this once verified that we no longer need it.]
     google.protobuf.BoolValue bind_to_port = 1;