RFC 8473 - Token Binding over HTTP These three standards are meant to add an extra layer of security for the process of generating and negotiating a new access/authentication token.