Sessions without cookies

The standard session model: user logs in, server stores state, server decides what you're allowed to do. Structurally incompatible with privacy. I've been working on something better, called HDK Sessions. Cookies were the original sin. Once you have a persistent identifier for each browser, building a profile behind it costs nothing. We hoarded data, built profiles, and found ourselves in the…