On the Use of Channel Bindings to Secure Channels

This document defines and formalizes the concept of channel bindingsto secure layers and defines the channel bindings for several types ofsecure channels. The concept of channel bindings allows applicationsto prove that the end-points of two secure channels at differentnetwork layers are the same by binding authentication at one channelto the session protection at the other channel. The use of channelbindings allows applications to delegate session protection to lowerlayers, which may significantly improve performance for someapplications.