Token Binding

Token Binding is a protocol mechanism that associates security tokens with a client-held key rather than relying solely on possession of the token string. A client demonstrates control of the corresponding private key, allowing a supporting server to reject some stolen-token replays from a different client.

It requires protocol and deployment support and should not be assumed available in every browser or application. It is distinct from simply issuing a signed bearer token.