diff --git a/index.bs b/index.bs
index 324a7d6a5..bcaf03374 100644
--- a/index.bs
+++ b/index.bs
@@ -3101,7 +3101,7 @@ The [$Asynchronous RP ID validation algorithm$] lets [=signal methods=] validate
 and returns a promise that rejects if the validation fails. The steps are:
 
 1. Let |effectiveDomain| be the [=relevant settings object=]'s [=environment
-    settings object/origin=]'s [=effective domain=]. If |effective domain| is
+    settings object/origin=]'s [=effective domain=]. If |effectiveDomain| is
     not a [=valid domain=], then return [=a promise rejected with=]
     "{{SecurityError}}" {{DOMException}}.
 1. If |rpId| [=is a registrable domain suffix of or is equal to=]