New mentor request: Device Bound Session Credentials (DBSC) JavaScript API

[Johnny Stenback]

(The form => email automation is still broken (making progress on fixing that, but no luck yet), so I'm sending this manually, requesting a spec mentor on behalf of sbo...@google.com).

Requestor email

sbo...@google.com

API or proposal name

Device Bound Session Credentials (DBSC) JavaScript API

Brief description

Allows websites and Identity Providers to synchronously check the registration state of a Device Bound Session Credentials (DBSC) session. DBSC provides cryptographic protection against account hijacking by binding sessions to the user's device, but currently relies on asynchronous HTTP headers. This API provides deterministic guarantees of session establishment before granting access, enabling secure SSO handoffs and synchronous cookie issuance

Chrome Platform Status entry

https://chromestatus.com/feature/6212149417476096

If you're interested in mentoring, please volunteer by replying to this email! Otherwise, d...@chromium.org will assign someone within the next 2 business days.

- jstenback