Frage im Vorstellungsgespräch bei Visa Inc.

What is statelessness in a REST API? How would you implement authentication for a REST API while maintaining statelessness? What are pointers and when should you use them?