saaros/paramiko — comment on commit f83510c1c5a337cb8c0c661f2aeae911c65bfd97
File:  line 0
By aarchiba:

This is a good idea! I did something similar in application code to support multiple chained tunneling (I need to tunnel an HTTP connection through three machines - don't ask). Not checking host keys by default makes me nervous; perhaps it makes sense to have unspecified hostnames raise an error, but allow users to specify 'None' to explicitly request no host checking? Or allow no-hostname calls only if the policy is to not check host keys anyway? Or try channel.getpeername()?