3 ms·

…because spoofing the “From:” of an email is an order of magnitude easier than intercepting who it was sent “To:”.