There may be additional changes for a server with SSL capabilities and there are other methods also being tried. SSL is the most though. Any time a form is processed, programs run on the host computer on behalf of the client. Imagine a CGI that processes credit card information being made to output the entire database of other peoples' registered information. This has actually happened.
Few developers know enough about security to keep out determined hackers.
It's best to have a consultant who specializes in security evaluate the site before putting it on line. Make your programmer guarantee a reasonable level of security before contracting with them for the project. I would say that no matter how tempting it is to include features in your web site that cater to a particular browser it is generally a bad idea to do this. Despite hypertext being somewhat non-standardized, there are plenty of useful features in current standards to do most anything. Netscape and MS Internet Explorer would love nothing more than for designers and programmers to incorporate lots of their special extensions in new pages.