Protecting Cookies with Device Bound Session Credentials
security.googleblog.com