New answers tagged certificates
For Ca -> 1. They need not to be online all the time. 2. Their certificate can be used when CA is offline. 3. There is no performance bottleneck while getting certificate certified. 4. There no single point failure like in KDC. 5. Compromising CA may not lead to knowing private keys. For KDC, think of above points, you will get to know.
Top 50 recent answers are included