Where a user interacts with a website at a given domain, this website then provides a web3 interface for the user to interact with, which connects back to the servers' instance of Ethereum.
It should not
Connect to a local ethereum node, at least not one which has user accounts unlocked.