Channel Binding

Channel binding ties an authentication exchange to properties of the secure transport channel carrying it. This helps prevent an authentication conversation from being forwarded onto a different channel without detection in protocols designed to verify the binding.

The chosen binding type and TLS version matter, and both peers must agree on the relevant channel data. Transport encryption alone does not mean an application’s authentication exchange is channel-bound.