There are plenty of legitimate uses for your own PKI that don&#x27;t involve MITM&#x27;ing your users.<p><a href="https:&#x2F;&#x2F;technet.microsoft.com&#x2F;en-us&#x2F;library&#x2F;a8f53a9b-f3f6-4b13-8253-dbf183a5aa62.aspx" rel="nofollow">https:&#x2F;&#x2F;technet.microsoft.com&#x2F;en-us&#x2F;library&#x2F;a8f53a9b-f3f6-4b...</a><p>&gt; Organizations can use AD CS to enhance security by binding the identity of a person, device, or service to a corresponding private key. AD CS gives organizations a cost-effective, efficient, and secure way to manage the distribution and use of certificates.<p>&gt; Applications supported by AD CS include Secure&#x2F;Multipurpose Internet Mail Extensions (S&#x2F;MIME), secure wireless networks, virtual private network (VPN), Internet Protocol security (IPsec), Encrypting File System (EFS), smart card logon, Secure Socket Layer&#x2F;Transport Layer Security (SSL&#x2F;TLS), and digital signatures.