3 ms·

A man in the middle could just as easily change the hash header, and MD5 isn't cryptographically secure anyway. It is still a very good checksum.