If you are connecting Converter to a vCenter server, then the traffic to/from vCenter is encrypted (by default - you can turn it off for performace reasons). When connecting to SMB shares - it depends on the SMB.
I am not sure about the VSS part of the question - VSS snapshots are stored locally on the disks of the machine where they are created.