[rosswilson]

You have to draw the line somewhere. Otherwise we'd be saying that HTTPS/TLS is not secure since the webpage is rendered to your monitor unencrypted.

I agree with the parent quote:

> I’ve found statements like these to not contribute very much towards solving any practical security problems.

[vultour]

But HTTP/TLS indeed is not secure from the point of your local machine. Its entire point is protection of data in transit.