Anyway, it's a good question that points out a wee hole in security - you can use TDE on the distribution and subscriber databases, but it will still be in clear as it passes between the servers so you will need to encrypt their connection if you want to be really secure.