Is it encrypted? Yes — every byte.
Every vpncli connection is encrypted end to end between your two machines. The coordination server that introduces them never sees your data.One login, no ssh
Access is controlled by your Monolex login, not by ssh keys scattered across machines.Mosh: encrypted twice
vpncli mosh layers two independent encryptions, so one never depends on the
other:
The one honest detail
The coordination server has to know which machines are connecting in order to introduce them — so it sees that “your laptop is connecting to your server.” It never sees what they exchange. If your threat model requires hiding even that connection metadata from your own coordination server, that’s a different posture than vpncli optimizes for; for reaching your own machines, your data is private and the metadata stays within your own account.In short
Next
How it works
The matchmaker model, in one diagram.