Reference Fetch spec rather than CORS spec

Fixes #41

index.bs

@@ -361,7 +361,7 @@ spec: SHA2; urlPrefix: http://csrc.nist.gov/publications/fips/fips180-4/fips-180
   In order to mitigate an attacker's ability to read data cross-origin by
   brute-forcing values via integrity checks, responses are only eligible for such
   checks if they are same-origin or are the result of explicit access granted to
-  the loading origin via Cross Origin Resource Sharing [[!CORS]].
+  the loading origin via Cross Origin Resource Sharing [[!Fetch]].
 
   Note: As noted in 
   <a href="https://tools.ietf.org/html/rfc6454#section-4">RFC6454, section 4</a>,