I've revamped a proposal to split the TLS features of WildFly Elytron into a standalone subsystem. The analysis is linked below, all feedback is appreciated.