[quasque]

I wonder if this attack would also work on the http://www.gstatic.com/generate_204 page that Chrome uses to detect captive portals if you are accessing https pages.