title: What does it mean for an application to be FIPS 140 compliant?
body: <p>Is it as simple as using FIPS 140 compliant crypto providers or is there more to it?  Are there differences if it is a web app vs a windows app?  What if it is a distributed app?  Are there any special considerations for IIS, WCF, ASP.Net, Silverlight, AJAX, etc?</p>
  
  <p>Thanks</p>