title: HMAC / Javascript - where to store the secret?
body: <p>The client gets it's secret for HMAC encryption after it's first login on the server - but what's the best way to store the secret on the (java-script) client? cookie, localStorage?
  thx</p>