Originally Posted by munki

Even the express paypal checkout methods still transmit personal information... maybe not cc#s... address alone, hell name transfer alone would cause for warranting ssl. And with how cheap ssl is... it shouldn't even be debate, if you run a website that includes any user forms whatsoever... just get it.