Think of it as a zero-capability web cookie. Burden of storage is on the client, so it scales nicely. If it's symmetric-encrypted, then it's unforgeable, and i

Think of it as a zero-capability web cookie. Burden of storage is on the client, so it scales nicely. If it's symmetric-encrypted, then it's unforgeable, and it's safe to include private information, like IP address or recent video-viewing history, just in case someone posts a screenshot of it on HN.