5 ms·

my understanding: spammer would have to intercept and modify the public key in the very first (and all subsequent) messages.