end-to-end encryption
Encryption that only the final recipient can decrypt, so no device in between, not even the VPN concentrator, can read the data. SSH and HTTPS keep data encrypted all the way to the server, while a VPN protects only the stretch to the office.