#dbsc
LightNews LightNews
fronkongames.bsky.social
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core is now available in the ASP.NET Core framework.

#indiedev #gamedevelopment #intel #gamedev
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET
In this post I look at the new experimental support for DBSC provided by the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package
andrewlock.net
November 3, 2026 at 5:11 PM
larklyte.bsky.social
Please behold the first crest created by @corruptivespirit.bsky.social , the crest for DBSC Young Boys~!
A logo for Ditzy Blitz Soccer Club Young Boys, a fictional mechanised football team. A star spangled football is flanked by two curvaceous outlines of Ditzy Blitz. The letters "DBSC" are spelled out above the ball.
October 29, 2026 at 5:30 PM
devopsbriefly.bsky.social
DPoP binds OAuth refresh tokens to client-held keys to prevent replay and token theft, while Google limits DPoP to refresh tokens and pairs it with DBSC for cookies.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
October 29, 2026 at 7:24 PM
privpros.bsky.social
DPoP binds OAuth refresh tokens to client-held keys to prevent replay and token theft, while Google limits DPoP to refresh tokens and pairs it with DBSC for cookies.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
October 29, 2026 at 7:24 PM
infosecbriefly.bsky.social
DPoP binds OAuth refresh tokens to client-held keys to prevent replay and token theft, while Google limits DPoP to refresh tokens and pairs it with DBSC for cookies.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
October 29, 2026 at 7:24 PM
burabura.bsky.social
DBSCはEditor's Draftで、クライアント実装は実質Chromium系のみ、Windowsが先行してmacが後追い、モバイルデバイスは遅れていてSafariも未対応か。次は重要システムでこっちの対応だな…Googleアカウント＋Windows Chromeは現状既に稼働しているだろうから、この点はかなり強そうだ。
x.com/_nat/status/...
Nat Sakimura/崎村夏彦 (@_nat) on X
ダークウェブで取引されているのはusername/Passwordではなく、ログイン済みのブラウザのセッションという話。ずっと前からこうなるよと指摘されていてToken Binding の規格化が進められていたが、ある時止められてしまった。ようやくDBSCで再起動しているけど、あの時やってればねぇ…
x.com
November 1, 2026 at 6:13 AM
sambowne.infosec.exchange.ap.brid.gy
White Paper: DBSC/DPOP as Complementary Technologies to FIDO Authentication | FIDO Alliance https://fidoalliance.org/white-paper-dbsc-dpop-as-complementary-technologies-to-fido-authentication/
fidoalliance.org
October 26, 2026 at 3:01 PM
yuxx.bsky.social
あー、セッショントークン自体を売ってるのか? 対象者を強制ログアウトとかさせないとダメなやつじゃん。
x.com/_nat/status/...
Nat Sakimura/崎村夏彦 (@_nat) on X
ダークウェブで取引されているのはusername/Passwordではなく、ログイン済みのブラウザのセッションという話。ずっと前からこうなるよと指摘されていてToken Binding の規格化が進められていたが、ある時止められてしまった。ようやくDBSCで再起動しているけど、あの時やってればねぇ…
x.com
November 1, 2026 at 7:22 PM
scotthelme.bsky.social
If passkeys have people this upset, wait until they hear about DBSC 🤣
Your session is hardware bound to your device... 🫆

Somewhere, a cookie just found out it can be device-bound 🍪🔐

scotthelme.co.uk/device-bound...
Device Bound Session Credentials: Making Stolen Cookies Useless
A stolen session cookie can be vastly more powerful than a stolen password. The attacker doesn’t need to phish the user, bypass MFA, or defeat their passkey; they simply replay the cookie and step…
scotthelme.co.uk
October 15, 2026 at 1:28 PM
discuss.privacyguides.net.web.brid.gy
Chrome rolls out hardware-bound session protection to combat infostealer malware
External Image corbado.com ### Device Bound Session Credentials (DBSC) explained Learn how Device Bound Session Credentials (DBSC) prevent session hijacking & cookie theft. Learn about browser support status and enterprise security. anyone interested can check if/when other browsers have implemented Device Bound Session Credentials (DBSC)
discuss.privacyguides.net
October 7, 2026 at 1:14 PM
devdigest.today
⚡️ DBSC lands in ASP.NET Core: experimental cookie-theft protection in .NET 11 preview 8

🏷️ #devdigest #dotnet #net #aspnet #asp

https://devdigest.today/goto/6716
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET 11 preview - Part 8
In this post I look at the new experimental support for DBSC provided by the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package
devdigest.today
October 7, 2026 at 6:30 AM
shikisokukusoku.bsky.social
DBSC完全解説！Cookie盗難（Infostealer）を物理無効化するGoogle主導の新セキュリティ規格

https://hubblespacetelescope.blogspot.com/2026/10/dbsccookieinfostealergoogle.html
October 2, 2026 at 11:41 PM
laylajohnston.bsky.social
A few Eastern Band of Cherokee Indians dialect words for autumn 🍂
Cherokee Words of the Week It is Foggy ukahada (oo-kah-haa-dah) It's Cool unesayvtsı (ooh-ney-sah-yuh-zee) Put a Blanket Down ayegatli hiyesdvvga (aah-yay-gah-tlee hee-yay-sduh-gah) DBSC ABOriS Elk egwa awi (aye-gwah ah-whee) RI DO Ball Game anetsodi (aah-ney-zoh-dee) DAKJ Scan the QR code below to hear audio pronunciations of these words
October 2, 2026 at 12:18 PM
aspnetcore.news
Experimental support for Device Bound Session Credentials (DBSC) in ASP .NET Core: Exploring the .NET 11 preview - Part 8 by @andrewlock.bsky.social andrewlock.net/exploring-th... #aspnetcore
September 25, 2026 at 8:44 AM
andrewlock.bsky.social
Blogged: Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core - Exploring the .NET 11 preview - Part 8

andrewlock.net/exploring-th...

In this post I look at the new experimental support for DBSC coming in .NET 11

#dotnet #security #aspnetcore
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET 11 preview - Part 8
In this post I look at the new experimental support for DBSC provided by the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package
andrewlock.net
September 22, 2026 at 3:13 PM
paulomorgado.net
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET 11 preview - Part 8
In this post I look at the new experimental support for DBSC provided by the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package
dlvr.it
September 22, 2026 at 9:31 PM
mircovanini.bsky.social
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core andrewlock.net/exploring-th...
Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core: Exploring the .NET 11 preview - Part 8
In this post I look at the new experimental support for DBSC provided by the Microsoft.AspNetCore.Authentication.DeviceBoundSessions package
andrewlock.net
September 22, 2026 at 4:15 PM
report-uri.bsky.social
We’ve rolled out Device Bound Session Credentials to 100% of Report URI logins. 🔐

67.7% of our active sessions are already device-bound, making this what we believe to be one of the first production DBSC deployments outside Google.

Here’s how we did it: blog.report-uri.com/we-rolled-ou...
We rolled out Device Bound Session Credentials to every Report URI login
Since 1st September 2026, every single login to Report URI has been offered a Device Bound Session Credential. That's 100% of our users, on the live site, all day, every day. As far as we can tell, t...
blog.report-uri.com
September 22, 2026 at 2:12 PM
particular.net
same machine it was issued to. This makes session hijacking harder, as you can no longer simply extract the cookie and use it elsewhere; such a cookie would not be valid.
Understanding Device Bound Session Credentials (DBSC)
In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works
andrewlock.net
September 20, 2026 at 1:04 PM
particular.net
Device Bound Session Credentials (DBSC) aim to provide a defence against "cookie theft" by allowing a server to verify that the authentication cookie is being used on the…
September 20, 2026 at 1:04 PM
paulomorgado.net
Understanding Device Bound Session Credentials (DBSC)
In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works
dlvr.it
September 16, 2026 at 6:55 AM
andrewlock.bsky.social
Understanding Device Bound Session Credentials (DBSC)

andrewlock.net/understandin...

In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works.

#security #dotnet
Understanding Device Bound Session Credentials (DBSC)
In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works
andrewlock.net
September 15, 2026 at 4:37 PM
mircovanini.bsky.social
Understanding Device Bound Session Credentials (DBSC) andrewlock.net/understandin...
Understanding Device Bound Session Credentials (DBSC)
In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works
andrewlock.net
September 15, 2026 at 5:37 PM
valjurai.bsky.social
Okay, folks... if this is happening to you in #edge... to go edge://flags, to a find for #DBSC and disable the flag associated with that, then restart edge.
August 30, 2026 at 6:53 PM
ytroncal.bsky.social
Sur Mac, Google renforce Chrome contre le vol de cookie de session www.clubic.com/actualite-62...
Sur Mac, Google renforce Chrome contre le vol de cookie de session
Google étend aux utilisateurs de macOS le dispositif Device Bound Session Credentials (DBSC). Ce dernier lie chaque session de navigation à une clé générée dans le Secure Enclave du Mac. Un cookie de ...
www.clubic.com
August 27, 2026 at 9:17 AM