https://github.com/WICG/proposals/issues/106
https://github.com/WICG/dbsc
DBSC Prototype Server: h
Device Bound Secure Credentials (DBSC) aims to reduce account hijacking caused by cookie theft. It does so by introducing a protocol and browser infrastructure to maintain and prove possession of a cryptographic key.
This proposal offers two important features that we believe makes it easier to deploy than previous proposals. DBSC provides application-level binding and browser initiated refreshes that can make sure devices are still bound to the original device.
https://github.com/Keyri-Co/session-lock
https://session-lock.keyri.com/