Fighting cookie theft using device bound sessions

$200K 1 10th birthday 4 abusive ads 1 abusive notifications 2 accessibility 3 ad blockers 1 ad blocking 2 advanced capabilities 1 android 2 anti abuse 1 anti-deception 1 background periodic sync 1 badging 1 benchmarks 1 beta 83 better ads standards 1 billing 1 birthday 4 blink 2 browser 2 browser interoperability 1 bundles 1 capabilities 6 capable web 1 cds 1 cds18 2 cds2018 1 chrome 35 chrome 81

[efcl]

デバイスとセッションを紐づける仕組み

[lli]

OSが持つ秘密鍵とセッションを結びつけた cookieを作成して盗み出しても使えない的な？斜め読みしかしてないから後で。

[koluku]

Windows11のTPM強制がここで活きるのか

[b-wind]

“When the browser starts a new session, it creates a new public/private key pair locally on the device”

[mizdra]

良さそう