everything is end to end encrypted with https now, how are you getting their passwords and emails?
If you're on the same network, you can intercept the DNS request to google servers, and serve a page that looks like google. (I think that's right , correct me if I'm wrong)
reply