Thread:Extension talk:VisualEditor/How does VisualEditor talk to Parsoid?

Does VisualEditor javascript on the user's browser talk directly to the Parsoid service (for example running on TCP 8000 on the server), or does it talk to the Wiki which itself talks to Parsoid then (via localhost)? This difference has some security implications, so it would be nice if you could clarify that.