strict host checking for github