You didn't get it. SSH can be used for tunneling (encrypting) TCP connections between two machines and it can be set up so that the SSH client acts as a SOCKS p

You didn't get it. SSH can be used for tunneling (encrypting) TCP connections between two machines and it can be set up so that the SSH client acts as a SOCKS proxy. Client apps connect to the SSH client, it tunnels the traffic trough the encrypted SSH connection to the other side where the SSH server decrypts it and connects to the target host. The traffic is thus encrypted between your machine and the SSH server, can't be sniffed from the air (unless the server is also connected to an insecure WIFI ;) ).