Danny Tsai
says to
YSITD
只對server授權 client只要被server授權過就認定是授權過 M$並不會直接驗證client授權