but session tokens ( cookies ) do provide efficiency. on the flip side its possible to sign every http request but then the users signer gets overloaded and they have no control on what they are signing.
All that said the current NIP-42 is okay, it just bugs me a bit that I have to approve some requests manually every day
