AD (and Kerberos) require the client to have a ticket from a central authority, and also require the server to be trusted by that same authority. It won't really work for the "wild" internet.