3 ms·

Or key-pinning RFC7469, Or DANE RFC6698. There are solutions, the point is they're not universally deployed.