diff --git a/index.bs b/index.bs
index 8a4af57..27aa83f 100644
--- a/index.bs
+++ b/index.bs
@@ -383,7 +383,7 @@ the verifying party MUST follow OpenID Connect Discovery 1.0 [[!OIDC-DISCOVERY]]
 
 When a Client performs an unauthenticated request to a protected resource,
 the Resource Server MUST respond with the HTTP <code>401</code> status code,
-and a <code>WWW-Authenticate</code> HTTP header. See also: [[RFC7235#section-4.1]]
+and a <code>WWW-Authenticate</code> HTTP header. See also: [[RFC9110#section-11.6.1]]
 
 The <code>WWW-Authenticate</code> HTTP header MUST include an <code>as_uri</code>
 parameter unless the authentication scheme requires a different mechanism