OpenSSH has the setting "CheckHostIP" which also checks the IP of the server and not just the host. We disable this feature for unclear reasons (it's been in the client since r6486 from 2005). It's unclear exactly what benefits, and what problems, we get by enabling this feature. Upstream has it on by default though. We should investigate this and take a more clear decision what we want.