Webstart subdomain socket permissions

Hi!

Before I get around to testing it out, I was wonder if anyone knew if I could use a webstart application to communicate with a subdomain that it came from without granting it socket permissions.

Another way to phrase it, you know how it can communicate to the server (via a socket) that it is coming from without said permissions, I am just wondering if it this is IP based or domain based, if it is domain based, then can it hit anything on the subdomain with the existing persmissions (similar to a cookie)? Or do I need to sign it and give it all permissions?

What I have is two differnet physical locations and I'm trying to distribute load... preferably without a security popup.

Thanks