Protocols/MSNP/MSNP15/Changes

MSN Protocol Version 15

Overview · Changes · Single Sign-On · Ticket Tokens
New features: Locations · Roaming Content

Changed commands

USR

MSNP15 uses a new authentication method called SSO (possibly for Single Sign-On). The new USR I command syntax is :

USR trid SSO I email@addr.ess

The new server's USR S command syntax is :

USR trid SSO S policy base64-encoded-nonce

The new client's USR S command syntax is :

USR trid SSO S t=mspauth&p=mspprof base64-ciphertext

The USR OK command is the same as in MSNP14. See the SSO page for more information.

Challenges

Windows Live Messenger 8.1.0168.00_ClientV8.1

• Product Key = RG@XY*28Q5QHS%Q5
• Product ID = PROD0113H11T8$X_

Test Values:

Challenge               Response
11533365622852247127    f086d1ded067186deca8dba2231602cf
13038318816579321232    3b25f5aab8143dd9a47971541666ae0e
13676118092332012962    e9ccbb3e90fabb047bad055f1d025cde

Windows Live Messenger 8.1.0178.00 (using OSpy)

• Product Key = PK}_A_0N_K%O?A9S
• Product ID = PROD0114ES4Z%Q5W

Windows Live Messenger Beta 8.5.1235.0517

• Product Key = YIXPX@5I2P0UT*LK
• Product ID = PROD0118R6%2WYOS

Windows Live Messenger 8.5.1288.816

• Product Key = ILTXC!4IXB5FB*PX
• Product ID = PROD0119GSJUC$18

Offline Messaging

There has been a change in the way offline messaging works, the few changes are reflected below and are based on Windows Live Messenger 8.1.0178.00 :

Sending an OIM

The SOAP Action URL changed from http://messenger.msn.com/ws/2004/09/oim/Store to http://messenger.live.com/ws/2006/09/oim/Store2 (i.e. moved to the Live.com domain).

For authentication, the SSO algorithm is now used instead of TWN (see Protocols/MSNP/MSNP15/SSO).