Vercel starts rolling out Device Bound Session Credentials for vercel.com

Malte Ubl of Vercel says the company is starting to roll out Device Bound Session Credentials (DBSC) for vercel.com. He says DBSC makes it impossible to steal session cookies from a device, so info-stealer malware, for example installed through a supply chain attack, could not take a user's vercel.com session.