2 ms·

QuakeNet has supported challenge response auth for more than 10 years, so this isn't a problem for anyone using that.