From: <ondrej.mihalyi_at_gmail.com>
Date: Mon, 10 Apr 2017 19:39:07 +0000 (UTC)

Dear EG,

Linda de Michiel asked on the umbrella mailing list whether this JSR
should be part of Web Profile.

I expressed some concerns about dependency on JASPIC:
https://java.net/projects/javaee-spec/lists/users/archive/2017-04/messa
ge/1

Can you clarify what is the status of Security JSR relation to JASPIC?
Is it really required by the API and spec, or it's only a requirement
for Soteria RI? Could it be turned into an optional dependency, so that
it doesn't need to be pulled to Web Profile together with the Security
JSR?

Thanks,
Ondrej