Thank you, I have found those now and am reading up on it in the link @BrianJ gave.
I’ll take up the default settings on the nightscout github.
Thanks to everyone. I guess I was a little shocked to see some stranger’s data on line just by mistyping a url. Poor fellow isn’t having a great time of it!
Personally I think secure by default should be, well, the default.