That's a fairly hard problem, especially for the late 90s. Improved HTTP auth is (and was) a much easier problem that the world would have benefited widely fro

That's a fairly hard problem, especially for the late 90s. Improved HTTP auth is (and was) a much easier problem that the world would have benefited widely from. Cookieless authentication would have meant a world with no loophole in browser cookie handling permitting ambient tracking cookies.