Hacker News Reader

Honest question: if you don't have cookies, then where do you keep your state?

In the session, where it belongs.

How do you link the browser to the session, if not with cookies?

You create a session identifiers as part of the protocol but that then breaks the semantics being compatible with HTTP/1.x

I think it will come and I think PHK's ideas a really interesting just that it's a step too far right now.