From: Ajay Reddy <areddy_at_us.ibm.com>
Date: Mon, 3 Apr 2017 21:11:04 -0500

Having in javadoc is good enough.

I mentioned that because the doc says..

... using the passed in HttpMessageContext, which is described in more
detail below.


Regards,
Ajay Reddy,






From: Bill Shannon <bill.shannon_at_oracle.com>
To: users_at_javaee-security-spec.java.net
Date: 04/03/2017 07:07 PM
Subject: [javaee-security-spec users] Re: [jsr375-experts] Re: JSR 375
            EDR1 Review - Initial comments



arjan tijms wrote on 04/ 1/17 07:25 AM:

        b) The HttpMessageContext description is missing in the doc.



      The main description is in the JavaDoc, which is part of the spec
      regardless of what's in the spec document. I'm not 100% sure when
      something is sufficiently spec'ed when in the JavaDoc and when it
      actually must be in the spec document as well.

As you say, the javadocs are part of the spec.  They're additive.  Nothing
needs to be in both.  Obviously information that appears in both needs to
be consistent.