HTTP Origin-Bound Authentication

horrible intro; tl/dr. Someone tell me specifically WTF I give a shit about this, what the pros/cons are. And write a concrete intro.