Jamie, Would it make sense to you to have an implementation of java.net.SocketImplFactory (called sometime like SSLSocketFactory) in JSS, which would do all the SSLSocket and SSLServerSocket classes so? That way I could slip JSS security under any application relatively painlessly by doing a simple setSocketImplFactory(SSLSocketFactory).
What do you say?
