Hello,

The `ssh_config` man page may be slightly confusing about StrictHostKeyChecking. I found this sentence:

    This provides maximum protection against trojan horse attacks

I always thought the option protects against man-in-the-middle attacks. I think if the user or the server is compromised via a trojan horse, the connection is most likely compromised as well, regardless of host key checking.