based authentication system?
As I see it, SSL has two major advantages over Kerberos: (1) It doesn’t require an accessible trusted third party; (2) it can be used to establish a secure connection even when one end of the connection doesn’t have a “secret” (a.k.a. “key” or “password”). These two advantages make it ideal for secured Web communication and for similar applications where there is a large user base which is not known in advance. [ Here are some disadvantages of SSL: ] 1) Key revocation.
