All, I've asked for comments on this KIP in the past, but since I didn't really get any feedback I've decided to reduce the initial scope of the KIP a bit and try again.
I have reworked to KIP to provide a limited, but useful set of features for this initial KIP and laid out a very rough roadmap of what I'd envision this looking like in a final version. I am aware that the KIP is currently light on implementation details, but would like to get some feedback on the general approach before fully speccing everything. The KIP can be found at https://cwiki.apache.org/confluence/display/KAFKA/KIP-317%3A+Add+end-to-end+data+encryption+functionality+to+Apache+Kafka I would very much appreciate any feedback! Best regards, Sönke