SSL authentication

With the release of MSN Messenger 5, it brought along a new .NET Messenger Service protocol, MSNP8. It was clear that it used a different authentication system going by the name of ‘TWN’ (later known to stand for Tweener) instead of the previous MD5 system. The client would make 2 connections to .NET Passport servers on port 443, it seemed obvious that this was the .NET Passport SSL auth system. What this process involved was rather silent for a few months. In April 2003, MrSquid revealed his ‘cookies for Web browser’ method. Other users caught on and eventually worked out how to use the Passport 1.4 authentication ‘properly’.

MSNP8 and up all use SSL authentication, WinInet is commonly used for Windows based programs, but it is possible to use your own SSL cryptography.

When you receive your incoming USR S command, you need to store the last parameter in a variable for later.

USR 5 TWN S lc=1033,id=507,tw=40,fs=1,ru=http%3A%2F%2Fmessenger%2Emsn%2Ecom,ct=1061530503,kpp=1,kv=5,ver=2.1.0173.1,tpf=a34e0e346ecb7e3643e4539358c60420
Pages: 1 2 3 4 5

2 Responses to “SSL authentication”


Comments are currently closed.