It sounds like his browser is trying to hit the site with HTTPS (SSL) instead of HTTP, although I know you (Steve) have a rewrite rule in effect to try and convert such requests back to HTTP.
Check the URL and ensure that it does NOT begin with "https://" and instead begins with "http://".