Protocol used by SPP to comunicate with Domain Controller

Hi,

i would like to have an official answer to this question:

When comunicating with AD Domain Controller (for example, for a user group sync), which protocol does SPP On Demand use? Does it use TLS or SSL?

Thank you in advance,

Simone