fragment() is also discussed in chapter 5 of the mpdc. it's been a while, but I'm pretty sure that what it says in 5.3 is true, that the browser holds on to it (as it does auth information) and won't let the server know.
Yeah, it's oddly hard to find references to this. The best I found was: http://www.w3.org/TR/webarch/#media-type-fragid "Interpretation of the fragment identifier is performed solely by the agent that dereferences a URI; the fragment identifier is not passed to other systems during the process of retrieval." david