From: arjan tijms <arjan.tijms_at_gmail.com>
Date: Sun, 10 Feb 2013 09:31:56 +0100

On Wed, Jan 16, 2013 at 9:18 AM, Markus Eisele <myfear_at_web.de> wrote:

> I was wondering, if there is any reason why JASPIC is only part of the
> Full Profile?
>

It's only slightly related and doesn't explicitly talk about the web
profile, but the following two blog articles from Ron Monzillo do mention
some points:
https://blogs.oracle.com/monzillo/entry/pluggable_authentication_in_servlet_3and
https://blogs.oracle.com/monzillo/entry/new_security_features_of_ee6

Kind regards,
Arjan Tijms