Basically, if the customer is entering there credit card information on your site (reffed to as a local checkout method. This use the Authorize.net AIM service), you need SSL.
if the customer is entering credit card information on the gateways site (reffed to as a remote checkout method. This use the Authorize.net SIM service), you do not need SSL.