SSL authentication

Authentication

This time the server should reply with something similar to the following if the password was correct. (As well as a few Set-Cookies, which are not important)

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Fri, 22 Aug 2003 04:20:11 GMT
PPServer: H: LAWPPLOGN3B010
Connection: close
Content-Type: text/html
Expires: Fri, 22 Aug 2003 04:19:11 GMT
Cache-Control: no-cache
cachecontrol: no-store
Pragma: no-cache
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
Authentication-Info: Passport1.4 da-status=success,tname=MSPAuth,tname=MSPProf,tname=MSPSec,from-PP='t=5iT1RKp3DGESbRj4q0fB9JPw$$&p=5EJT4vPSbwqJ7doB2JbAG2qBKCdFB6jZyw$$',ru=http://messenger.msn.com
Content-Length: 0

If the password was wrong, it would include the header WWW-Authenticate with a value like Passport1.4 da-status=failed.

In the header Authentication-Info there is a value called from-PP, the value is what you send back to the NS, the from-PP value is between the two apostrophes. It will be something like t=xxx$&p=xxx$.

USR 6 TWN S t=5iT1RKp3KDGERjq0fB9JBIYKSaPw$$&p=5EJT4XDSbwqJ7doB2JAG2qBKCFB6jZyw$$