> I considered this but one issue I encountered is that there's no common module between spray-io and spray-http. We'd need the SSL-Session-Info header to match I think.

I discussed this with Mathias and we think that we should put the SSL session info model in spray-util for the time being. spray-http may not yet have a dependency on spray-util but you can introduce that.