Hi Sscarcella,
For domain authenticated intranet users, this isn't a problem. For internet-based users, we use https and have developed Web services to easily interface InfoPath forms with a Database. The Web services use Active Directory to authorize access to forms and we have an admin tool that lets you set template and form level permissions based on users, groups or fields in the form. For more info on our Web service suite, check out www.qdabra.com. Cheers!
Patrick Halstead
Project Manager at Qdabra