3 ms·

I should clarify: those are the three scenarios I could come up with that allow snooping but not MitM.