file transfers should be encrypted (always? or just over non-ssh channels)

[Antoine Martin]

The default encryption code fails for lines over 1KB long...
So we could exchange a hash that is then encrypted with the salt for xoring the data before transfer.

It would be best to avoid doing this when the connection is already using SSH (which does its own encryption) - simply using the server.tunneled flag should be enough.

Split from #133