Google bakes new cookie strategy that will leave crooks with a bad taste

Google is developing Device Bound Session Credentials (DBSC), a mechanism that binds web sessions to device-held cryptographic keys (e.g., TPM-backed) to render stolen cookies useless; the initiative is being tested in Chrome Beta, aims to become an open standard with broader industry interest, and aligns with Chrome’s phase-out of third-party cookies while maintaining user privacy.