I updated the KIP to keep reconfiguration in SslFactory and create a new SslEngineFactory interface
public interface SslEngineFactory { void configure(Map<String, ?> configs, Mode mode); SSLEngine createSslEngine(String peerHost, int peerPort); } Please read the KIP and send your comments. -----Original Message----- From: Pellerin, Clement Sent: Wednesday, November 28, 2018 11:49 AM To: dev@kafka.apache.org Subject: RE: [DISCUSS] KIP-383 Pluggable interface for SSL Factory If no one objects, I'll rewrite the KIP like this and resubmit for discussion: Ideal interface, ignore the atomicity issue, only keystore and truststore is reconfigurable.