Yeah, I think I agree with you there. The area for improvement for token binding or something like it is quite promising; not so for using IP signals. I think

Yeah, I think I agree with you there. The area for improvement for token binding or something like it is quite promising; not so for using IP signals. I think token binding itself had some design flaws that made it hard to realize these improvements, but that's not to say that I think IP signals are better (or obviate) cryptographic replacements for bearer tokens—I don't think that. I just think it's an irony of token binding's design that the design suggested an implementation which in practice provided less value than IP binding.