originbinding
Origin binding is a concept in computer security and information provenance that describes the process of tying or binding a piece of data, a request, or an action to its origin (the source or provenance) in a verifiable way. The goal is to establish trust, enable provenance tracking, and enforce access or usage constraints based on where something came from.
- Web security: origin binding can help ensure that requests and tokens are usable only for the
- Data provenance: in data pipelines and collaborative systems, origin binding attaches provenance metadata to data items,
- Distributed systems and APIs: services may require requests to present origin proofs, enabling origin-aware access control.
- Advantages include stronger accountability, improved integrity guarantees, and reduced risk of cross-origin misuse.
- Challenges involve privacy concerns, the potential for origin spoofing, handling legitimate cross-origin workflows (such as redirects),
Origin binding is related to the same-origin policy, Cross-Origin Resource Sharing (CORS), and mechanisms like postMessage
See also: same-origin policy, CORS, postMessage, data provenance, origin-bound tokens.