"Token Binding over HTTP" - Andrey Popov, Magnus Nystrom, Dirk Balfanz, Adam Langley

2015-06-30, rev -01: This document describes a collection of mechanisms that allow HTTP servers to cryptographically bind authentication tokens (such as cookies and OAuth tokens) to a TLS [RFC5246] connection.