Secure Form

Hi,
I have a friend that wants some secure forms created. Some for collecting data, some for processing transactions. He has SSL, but is unsure about PGP and thinks he has a thawte cert. Does anyone know where i can find a tute on creating secure/encrypted forms using a method other than PGP?