It specifically states that it does end-to-end-encryption (which is not SSL). I know the authors, and IMO they're not the kinda guys who throw around with buzzwords.