3 ms·
Google introduces device-bound session credentials to fight account hijacking
- verdverm 1y agoThere has to be a better source for this. Neowin doesn't even talk about the credentials and is riddled with ads
- verdverm 1y agohttps://developer.chrome.com/blog/dbsc-origin-trial https://developer.chrome.com/blog/dbsc-origin-trial https://w3c.github.io/webappsec-dbsc/ https://w3c.github.io/webappsec-dbsc/ https://blog.chromium.org/2024/04/fighting-cookie-theft-using-device.html?m=1 https://blog.chromium.org/2024/04/fighting-cookie-theft-usin...
- verdverm 1y agoI believe DPoP has similar goals, had to implement this as part of ATProto OAuth