That's all been asked and answered in lots and lots of threads already, including a couple others just today.
Short answer: Some ajax stuff works (gmail), others don't (google docs). Encryption/certificates no problem, but no java applets. Javascript ok.