Kerberos vs. SSL/TLS

• Kerberos

  • widely deployed in universities
  • requires some investment in infrastructure
  • both open source and commercial (some broken)

• SSL/TLS

  • integrated support in browsers
  • lower infrastructure requirements
  • useful with large populations of external users
  • problems: patent issues, secure storage of private keys