16
Chromium developing device bound session tokens to combat session token theft techniques
(blog.chromium.org)
A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.
Rules :
Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient
You are smart to be skeptical of Google's intentions, but it seems like it is possible to make an implementation without the problems you identified.