Hi Danny,
The sync framework does not define the transport. That said, it is up to you to use your preferred transport to transfer data and metadata across. For the internet, you could consider SSL or Web Services security extension to secure the channel. WCF makes these things a lot easier.
Thanks