Best article about this subject ever.

I just wonder if it is possible to make this without using certificates..

Is it really necessary to use certificates in an domain environment?