Haven't had a chance to look at the content itself yet, but do you cover FIPS at all? Our company is wanting to sell product to the U.S. Federal govt and it turns out we need to improve our TLS (data-in-transport) implementation to use FIPS-validated crypto providers. It'd be nice to understand why simply using strong TLS v1.2 cipher suites is not enough and we need to also plugin a special crypto provider.