Combination of scheme, host, and port that defines the security boundary for web content. FIDO authenticators are cryptographically bound to origins to prevent phishing.