MSSQL Replication Over The Internet

I'll be configuring a replication of a database over the internet using SSMS. I need to encrypt the communication between the two hosts, and a VPN isn't an option. Is using HTTPS via IIS the best option I have? I believe you can use certificates for encrypting connections over SSMS, but does that not apply to replication?

I'm just looking for the best option.

Thanks