diff --git a/includes/rest/class-outbox.php b/includes/rest/class-outbox.php
index 087c0efe..9fff8c7c 100644
--- a/includes/rest/class-outbox.php
+++ b/includes/rest/class-outbox.php
@@ -144,7 +144,6 @@ class Outbox {
 			'required' => true,
 			'type' => 'integer',
 			'validate_callback' => function( $param, $request, $key ) {
-				// this is probably ok on multisite still?
 				return user_can( $param, 'publish_posts' );
 			},
 		);
diff --git a/includes/rest/class-webfinger.php b/includes/rest/class-webfinger.php
index e7c00fa5..f75a3f7f 100644
--- a/includes/rest/class-webfinger.php
+++ b/includes/rest/class-webfinger.php
@@ -62,7 +62,6 @@ class Webfinger {
 		}
 
 		$user = \get_user_by( 'login', \esc_sql( $resource_identifier ) );
-		/// YIKES NOPE NOPE NOT ON DOTCOM!
 
 		if ( ! $user || ! \user_can( $user, 'publish_posts' ) ) {
 			return new WP_Error( 'activitypub_user_not_found', \__( 'User not found', 'activitypub' ), array( 'status' => 404 ) );