Hacker News Reader

By using a CA they control to generate a fake certificate for Google like they've already "accidentally" done:

Which they can only pull off once before their CA is distrusted. See: how Chinese government CA was restricted to .cn domains only