[mtts]

I think the point is not that no session state at all should be stored client side, but that most session state should not be.

[alan]

Actually, Peej is a REST fan. He's saying that if there's session state it should be on the client side. There should be none on the server side.