2 ms·

I don't know how much it would cost in latency, but I think one of the concerns is that all traffic is stored for future decryption.