"Google's Chrome: Battling Cookie Theft with Encryption and New Web Standard"
Google Chrome is proposing Device Bound Session Credentials (DBSC) to combat cookie theft malware by binding authentication sessions to the device using a public/private key pair stored locally, making it harder to export. The API allows servers to associate a session with the public key and verify proof-of-possession of the private key throughout the session lifetime. Google aims to make DBSC an open web standard and is already testing it in Chrome Beta for some Google Accounts, with plans for origin trials by the end of 2024.