SSL authentication

Authentication Server / Dispatch 2

If the sign in name is a @hotmail.com or @msn.com one, this server will redirect you to the right authentication server. Otherwise this redirect with be skipped and will be the same as the Authentication section below.

Once connected, request the file Nexus provided to login with. With at least the headers shown below.

GET /login2.srf HTTP/1.1
Authorization: Passport1.4 OrgVerb=GET,OrgURL=http%3A%2F%2Fmessenger%2Emsn%2Ecom,sign-in=example%40hotmail.com,pwd=yourpassword,lc=1033,id=507,tw=40,fs=1,ru=http%3A%2F%2Fmessenger%2Emsn%2Ecom,ct=1061523064,kpp=1,kv=5, ver=2.1.0173.1,tpf=0f9bf031d1efe6a3f9c1a6146403c93b
Host: login.passport.com

The important header here is “Authorization”, this contains all the information the server needs to authenticate. The password should have characters other than a-z;A-Z;0-9 URL encoded. The italic text is what the NS sent to you in the incoming USR S command, which you put into a variable.

The server should now reply with something similar to the following:

HTTP/1.1 302 Found
Server: Microsoft-IIS/5.0
Date: Fri, 22 Aug 2003 04:17:31 GMT
PPServer: H: LAWPPLOG5C006
Connection: close
Content-Type: text/html
Expires: Fri, 22 Aug 2003 04:16:31 GMT
Cache-Control: no-cache
cachecontrol: no-store
Pragma: no-cache
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Authentication-Info: Passport1.4 da-status=redir
Location: https://loginnet.passport.com/login2.srf?lc=1033

Basically repeat the previous request, but to the server and URL specified in the Location header.