Disadvantage of using a internal CA issued certificate? Why is it not common?

[chikeungho]

Disadvantage of using a internal CA issued certificate? Why is it not common?

[sw2090]

well the main disadvantage of this is that this CA is not trusted by the browsers and systems by default. You will always manually have to install this as trusted ca on every system that needs the verfiy your cert.

Thus there is cases where there is no alternative to that e.g. Deep Packet Inspection (SSL Inspection). This needs a sub-ca or ca cert to work (due to the way it works) which you cannot buy (sub-ca) or afford (ca).

[chikeungho]

thank you sw2090.

Could anyone give me any example?

would it affect the efficiency of the hardware?

Thanks.