Elliot,
If this was for PP's standard payment or IPN - then a customer does not enter info until connected to PP and this is a https: connection and it is their SSL that is used.

If PP Pro Flow?? then info is entered on your site and your customer does not leave your site - So you will need and are required by the gateway - PP in this case - to have an SSL