diff --git a/security/split-gpg.md b/security/split-gpg.md
index 5b3f8d51..3cc2417f 100644
--- a/security/split-gpg.md
+++ b/security/split-gpg.md
@@ -157,8 +157,6 @@ only `gpg2`). If you encounter trouble while trying to set up Split-GPG, make
 sure you're using `gpg2` for your configuration and testing, since keyring data
 may differ between the two installations.
 
-## Qubes 3.2 Specifics ##
-
 ### Using Thunderbird + Enigmail with Split GPG ###
 
 However, when using Thunderbird with Enigmail extension it is
@@ -176,9 +174,7 @@ the name of the GPG backend VM. This file survives the AppVM reboot, of course.
     [user@work ~]$ sudo bash
     [root@work ~]$ echo "work-gpg" > /rw/config/gpg-split-domain
 
-## Qubes 4.0 Specifics ##
-
-### Using Thunderbird + Enigmail with Split GPG ###
+#### Qubes 4.0 Specifics ####
 
 New qrexec policies in Qubes R4.0 by default require the user to enter the name 
 of the domain containing GPG keys each time it is accessed.  To improve usability