diff --git a/helwasm/index.html b/helwasm/index.html
index 70107a1..ae1648d 100644
--- a/helwasm/index.html
+++ b/helwasm/index.html
@@ -46,7 +46,7 @@
             sync, or back up, and you only ever remember one phrase. By default each password
             is six short, memorable words — the <em>correct horse battery staple</em> idea from
             <a href="https://xkcd.com/936/" target="_blank" rel="noopener">xkcd 936</a> — built on
-            the classic S/KEY one-time-password scheme (RFC 2289).
+            the classic S/KEY one-time-password scheme (<a href="https://www.rfc-editor.org/rfc/rfc2289" target="_blank" rel="noopener">RFC 2289</a>).
           </p>
           <p class="about-privacy">
             <strong>Private by design.</strong> Everything happens on your device. Your master