Suppose, for the sake of argument, that you wanted to spy on people using Microsoft’s outlook.com website. First, you would need to capture requests to the site along with the returned web pages. But ...