[chef] Client/Server secure model

[< >]

Hello,

I'm quite new on Chef, but some guys told me that Chef don't use a secure
channel model between client and server. So they told me to use "Puppet", that
does this natively  (I'm not talking about use a external tunnel or something
like that, but about Chef's internal secure communication
implementation/model).

I think this is not true (what they told me), but I have not solid arguments 
to
discuss/use with they.

Can you help me?