As an SSLEngine is created the host and port information is available at the time the engine is requested: -

https://download.java.net/java/early_access/jdk11/docs/api/java.base/javax/net/ssl/SSLContext.html#createSSLEngine(java.lang.String,int)

We could make use of this information to dynamically select alternative configurations.

This would also be a natural follow up to EAP7-1096 so the registered SSLContext could delegate to different configurations based on destination.