3 ms·

I think Yahoo used to (maybe still does?) set it in a cookie, letting the browser's same-origin policy enforce it.