Yeah SSL for forums is not required.
What we have is a separate *Customer Only Forums* area, where we grant permissions to existing customers, to discuess their matters. so even if they use any of their personal information (not CC info 😀), it is not risky. This also gives them a feel of exclusivity.
Forums are a good means to get new customers, so it should be simple and easy to use.