In MTree or directory replication, encryption configuration does not have to be the same at both the source and destination. Instead, the source and destination securely exchange the destination’s encryption key during the replication-association phase. The data is re-encrypted at the source using the destination’s encryption key before transmission to the destination.
If the destination has a different encryption configuration, the data transmitted is prepared appropriately. For example, if the feature is turned off at the destination, the source decrypts the data, and it is sent to the destination as unencrypted.
