All network commands among fetcher, mine, apply and console are sent encrypted. The key serves both as authentication and encryption.
On WAN networks, even the The redo/plog contents is sent encrypted if the option is selected.
The key is defined by variable NETWORK_TRAFFIC_KEY. As As this can be considered as sensitive information, there are more ways how to specify this value:
...