Do I have to use GateKeeper when I have an unsigned applet client?
No, you don’t have to. There are three restrictions imposed by Java sandbox: 1. The applet can only connect back to the host where the code was downloaded. 2. The applet cannot receive incoming connections. 3. No broadcast UDP message can be sent out from the applet. So if the server is at the host where the applet was downloaded, there is no callback involved and client doesn’t use OSAGENT to do bind, the client can communicate to the server without GateKeeper.