diff --git a/README.md b/README.md
index dbf3a06..b16b8a9 100644
--- a/README.md
+++ b/README.md
@@ -58,7 +58,7 @@ intercepting web traffic. This worked, but was more error prone and complex.
 This method is much simpler, and should always work.
 
 ## Proof
-[Here](PROOF.md) is a link to another file with examples of the output from
+[Here](docs/PROOF.md) is a link to another file with examples of the output from
 tcpdump showing the interception during an outage.
 
 ## Related project
diff --git a/PROOF.md b/docs/PROOF.md
similarity index 100%
rename from PROOF.md
rename to docs/PROOF.md