It's important to be clear that this is a man-in-the-middle attack — it only works when the attacker is on your network and can see the traffic going between your computer and the website.