Vault encrypting password over the network or just locally

Hi,

I'm trying to secure my ansible playbook and one of the steps is
securing the password. I know that I can store the password encrypted
inside ansible vault and than use directly from the vault and send it
over the network (e.g. change pass) but the question is, the password
is decrypted and sent through the network(plain text) or encrypted and
encrypted at the destination ?

Thanks,
Mihai.

Does anyone know?

Ansible uses ssh(on *nix) to the host so the traffic is encrypted.

Obvious...my bad, stupid uquestion