Comment by Sjoerd

Token binding provides something like that. With token binding you have a private/public key pair for each site that supports it. An identifier is created from the public key and signed with the private key, to prove your identity.

https://www.sjoerdlangkemper.nl/2017/07/05/prevent-session-h...