> Based on both of the above, I assume anonymous cipher suites (e.g., SSL_DH_anon_WITH_RC4_128_MD5) result in getLocalPrincipal returning null and getPeerPrincipal throwing. I'll test that.

Just tested and confirmed this behavior. Based on latest commit (30bf6fa), using an anonymous cipher suite results in a header like `SSL-Session-Info(SSL_DH_anon_WITH_RC4_128_MD5, List(), None, List(), None)`.

Where does that leave us with the CipherConfiguration ADT?