A system includes a shore based security proxy to transmit and receive encrypted network traffic on behalf of users who opt in. The shore-based security proxy includes an Internet interface and a data compander. The system further includes a compander on a mobile vessel comprising a satellite interface and a local area network (LAN) interface, and logic to exchange uncompressed, unencrypted traffic over the LAN interface between user devices on the mobile vessel and the compander on the mobile vessel; and logic for the shore based compander to exchange compressed, encrypted data with the compander on the mobile vessel over the satellite interface.