Do I haveto have may own web server and get it configured for
SSL for security?
You probably need SSL for security (though there are a few exceptions)
and in that case you might want your own serve just to be secure from
others users sharing the same web server.
The case where you don't need SSL is if you have very simple needs
and you're willing to let the credit card processor do all the work. If
I'm not mistaken, it's possible to set up Signio (verisign) in this way:
You simply transmit a total and any other customer ID you wish to
the signio website (which is configured to only accept data from your
ip) and then they get all the ccard info on their secure page. You
never see the customer's credit card on your site, but only the
approval number.
But for anything full-blown, you will want your own server.