"Token Binding over HTTP" - Andrey Popov, Magnus Nystrom, Dirk Balfanz, Adam Langley, Jeff Hodges

2016-07-07, rev -05: This document describes a collection of mechanisms that allow HTTP servers to cryptographically bind authentication tokens (such as cookies and OAuth tokens) to TLS [RFC5246] connections.