The only way I could see that working is if they'd managed to obtain a valid certificate for google.ie. They couldn't just "grab" the server-side cert from the real site (well, not without breaking in ...