Here is a proposal for SSLContext that supports delegation to alternate instances based on peer information:

Any feedback is welcomed.

Thanks,

Diana Křepinská (Vilkoláková)