What are the key authentication and encoding details to consider when writing a Python Exchange PowerShell client?

Kerberos authentication requires the hostname (lowercase) and a full FQDN – IPs are not supported. The HTTP headers must include `Accept-Encoding: identity`. Both sent and received data are encoded (e.g., base64). After the initial Kerberos step, subsequent requests carry normal command payloads. These nuances are crucial for interoperability and are detailed in [Penetration Technique: Remote Access to Exchange PowerShell](/news/penetration-technique-remote-access-to-exchange-powershell) and the Python implementation article.