fix formatting

index.bs

@@ -379,8 +379,8 @@ When this method is invoked, the user agent MUST execute the following algorithm
 9. For each authenticator currently available on this platform: asynchronously invoke the <a>authenticatorMakeCredential</a>
     operation on that authenticator with |rpIdHash|, <a>clientDataHash</a>, <a>accountInformation</a>, `normalizedParameters`,
     <a>excludeList</a> and |clientExtensions| as parameters. Add a corresponding entry to |issuedRequests|.
-     - For each credential C in <a>excludeList</a> that has a non-empty |transports| list, use only the specified transports
-        to test for the existence of C.
+    - For each credential C in <a>excludeList</a> that has a non-empty |transports| list, optionally use only the specified
+        transports to test for the existence of C.
 
 10. While |issuedRequests| is not empty, perform the following actions depending upon the |adjustedTimeout| timer and responses
     from the authenticators:
@@ -446,8 +446,8 @@ When this method is invoked, the user agent MUST execute the following algorithm
     - If <a>allowList</a> is undefined or empty, let |credentialList| be an empty list. Otherwise, execute a platform-specific
         procedure to determine which, if any, credentials listed in <a>allowList</a> might be present on this authenticator, and
         set |credentialList| to this filtered list. If no such filtering is possible, set |credentialList| to an empty list.
-    - For each credential C within the |credentialList| that has a non-empty |transports| list, use only the specified transports
-        to get assertions using credential C.
+    - For each credential C within the |credentialList| that has a non-empty |transports| list, optionally use only the
+        specified transports to get assertions using credential C.
     - If the above filtering process concludes that none of the credentials on <a>allowList</a> can possibly be on this
         authenticator, do not perform any of the following steps for this authenticator, and proceed to the next authenticator
         (if any).