Exported Authenticators: The long road to RFC

This post introduces Exported Authenticators (EAs) as a new extension to TLS. EAs enable application-layer authentication that is as strong as TLS authentication and can be tied to the TLS channel via channel binding. This allows for advanced authentication possibilities such as TLS connections with multiple certificates and logging into websites without revealing passwords. The design of EAs closely follows the TLS 1.3 handshake to ensure security and leverages existing cryptographic primitives.