Token Binding

The idea was that applications at the next layer, OAuth, for example, could bind their tokens issued to the token binding key pair provided by the lower layers. The RFCs were published out of that working group, but there were a number of things that led to basically just non adoption of it. They're really not available in practice today in any platform or browser or really anywhere.