Device-Bound Session Tokens in JavaScript

Show HN: Device-Bound Session Tokens in JavaScript

Device-Bound Session Tokens in JavaScript is active in the show hn launch space.

Profile

Google’s recent announcement of a proposed ‘Device Bound Session Credentials’ feature[1] for Chrome reminded me of a project we worked on last year at my company. We focus on fraud prevention at signup and login (preventing multi-accounting and account theft), but some customers were concerned about post-login security and asked us to add a session hijacking prevention feature to our fraud prevention API. In the end, we decided to just implement a solution in Javascript. We call it session-lock, and it can be used today across all browsers[2] and, theoretically, native mobile apps.For a more comprehensive writeup and quick demo, you can visit the link. In short, the library adds a device-bou

Device-Bound Session Tokens in JavaScript is positioned in show hn launch, a segment that rewards a clear, focused offering.

Its current recorded stage is Show HN launch.

Website: session-lock.keyri.com