Device Bound Session Credentials (DBSC) for Node.js — middleware that binds session cookies to a hardware TPM key to stop cookie theft, with a Web Crypto polyfill for Firefox & Safari.
-
Updated
Sep 19, 2026 - TypeScript
Device Bound Session Credentials (DBSC) for Node.js — middleware that binds session cookies to a hardware TPM key to stop cookie theft, with a Web Crypto polyfill for Firefox & Safari.
An experimental Go implementation of the Device Bound Session Credentials (DBSC) protocol for securing web sessions against cookie theft.
Device Bound Session Credentials for Symfony: sessions tied to hardware keys.
Server-side toolkit for Device Bound Session Credentials (DBSC)
Preliminary implementation of Device Bound Session Credential standard for PHP 8.4+
Device Bound Session Credentials Implementación del borrador W3C DBSC sobre ASP.NET Core
A clean, single-use Google sign-in: a throwaway browser profile for exporting Google session cookies. Windows, macOS, Linux.
Device Bound Session Credentials (W3C DBSC) for Django: stolen session cookies stop working.
Device Bound Session Credentials (DBSC) for ASP.NET Core. Community fork of the experimental Microsoft package removed in .NET 11 RC2.
To associate your repository with the dbsc topic, visit your repo's landing page and select "manage topics."