Broad title, I know...
Assuming for a self-hosted webserver:
- the webserver only hosts a static html website
- iptables is used to reject every IP except a few known ones
- only Port 443 is forwarded and the website requires SSL via client certificates
What kind of dangers remain? (Disregarding security holes in a patch)