Latest
Hijacking
Device Bound Session Credentials: The Answer to Session Theft
Chrome shipped DBSC to stable. It binds the session cookie to a key in the TPM, which makes a stolen cookie inert off the originating device. Here is the protocol, the honest limits, and the buyer checklist.
Read the article