Chrome 135 Introduces Device-Bound Session Credentials for Enhanced Web Security

Chrome 135 introduces Device-Bound Session Credentials (DBSC), a new feature designed to bolster web application security. DBSC protects user sessions from cookie theft and hijacking by generating a key pair bound to the device. Even if cookies are stolen, attackers can't access accounts from other devices. Leveraging hardware-backed storage like TPM and regularly refreshing short-lived cookies, DBSC significantly enhances security without impacting user experience. Developers can integrate and test this feature via HTTP headers.