O Java tentou arduamente transformar uma plataforma segura, quebrando assim praticamente tudo.
O Java tem várias etapas para tentar resolver:
WORKAROUND
[snip]
If the URL where the applet is hosted is different from the URL of the web page from which the applet is launched, then you will need to add both the URL for the applet as well as the URL for the web page.
Example with different URLs for the applet and the web page For Yahoo games Checkers, you would enter both URLs (The urls listed can be different depending on which host is serving the game) http://www.games.yahoo.com This is the url for the Yahoo games domain http://yog36.games.sp2.yahoo.com This is the url where the game is hosted and shown in the dialog box for the blocked application
[snip]