diff --git a/build/Dockerfile b/build/Dockerfile
index 601b16f..bb104e6 100644
--- a/build/Dockerfile
+++ b/build/Dockerfile
@@ -14,6 +14,7 @@ COPY internal ./internal/
 COPY vendor ./vendor/
 COPY web ./web/
 
+RUN apk --no-cache add ca-certificates
 RUN go build -o ./auth
 
 # Run
@@ -21,6 +22,7 @@ FROM scratch
 
 WORKDIR /
 
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 COPY --from=builder /app/auth /auth
 
 EXPOSE 3000
diff --git a/internal/domain/response_type.go b/internal/domain/response_type.go
index b597234..3c9cd87 100644
--- a/internal/domain/response_type.go
+++ b/internal/domain/response_type.go
@@ -18,14 +18,18 @@ type ResponseType struct {
 var (
 	ResponseTypeUnd = ResponseType{responseType: ""} // "und"
 
-	// Deprecated(toby3d): Only accept response_type=code requests, and for
+	// ResponseTypeID indicates to the authorization server that this is an
+	// authentication request. If this parameter is missing, the
+	// authorization endpoint MUST default to id.
+	//
+	// Deprecated: Only accept response_type=code requests, and for
 	// backwards-compatible support, treat response_type=id requests as
 	// response_type=code requests:
 	// https://aaronparecki.com/2020/12/03/1/indieauth-2020#response-type
 	ResponseTypeID = ResponseType{responseType: "id"} // "id"
 
-	// Indicates to the authorization server that an authorization code
-	// should be returned as the response:
+	// ResponseTypeCode indicates to the authorization server that an
+	// authorization code should be returned as the response:
 	// https://indieauth.net/source/#authorization-request-li-1
 	ResponseTypeCode = ResponseType{responseType: "code"} // "code"
 )