"Token Binding over HTTP" - Andrey Popov, Magnus Nystrom, Dirk Balfanz, Adam Langley, Jeff Hodges

2016-03-21, rev -03: This document describes a collection of mechanisms that allow HTTP servers to cryptographically bind authentication tokens (such as cookies and OAuth tokens) to a TLS [RFC5246] connection.