saaros/paramiko — comment on commit f83510c1c5a337cb8c0c661f2aeae911c65bfd97
File:  line 0
By aarchiba:

Certainly it needs to be optional, but I think it should default to checking. That is, I think it should check the host key and fail if the check fails - unless the user specifies otherwise. So how's this: if no hostname is supplied, paramiko tries channel.getpeername(). If the user doesn't want host identity checking, they can set a policy to say so.