During the installation of IBM Connections Touchpoint for a customer a stumbled upon an "issue" that is not (yet) covered in the documentation but is/will be an issue in the "real world™": "ssl-only environments" (properly: "tls-only"). The Connections documentation has a whole chapter called "Forcing traffic to be sent over an encrypted connection" on how to redirect all HTTP traffic to Connections to HTTPS (which you should do in times like these).

Running a Domino based web application behind a reverse proxy (as I am doing for quite some time now) is the latest craze (due to the SSL issues in the current Domino SSL stack). Sean Cull has instructions for configuring Apache, Jesse Gallagher for ngix. There is one issue unsolved though in Seans configuration w(that Jesse solved for ngix). The field "Remote_Addr" in the web application will, due to Apache acting as a reverse proxy, not contain the IP of the client calling the app any more. Which can be an issue, if you need that information in your app. The Domino Blog for example can't block clients based on their IP any more.