The EXAMPLE-QIDO-SERVICE can be configured to respond on one port for TLS protected traffic. The TLS port will refuse any connection from a system that is not recognized as authenticated by a known authority.