SFTP Transport does not restrict access to known hosts only [Jsch StrictHostKeyChecking=yes] option.

• User impact:

  Low
• Effort points:

  0.5
• Migration Impact:

  Hide

  None. the configuration only adds new attributes. No current attributes are affected.
  Code wise, JSch already supports this feature.

  Show

  None. the configuration only adds new attributes. No current attributes are affected. Code wise, JSch already supports this feature.
• Similar Issues:

  None

JSch supports concept of StrictHostKeyChecking which is one of ask,yes,no.
For mule, considering it is a non-interactive mode, atleast yes,no can be supported.
sftp connector configuration should support something like this:
<sftp:connector name="sftp-default" strictHostKeyChecking='yes' knownHostsFile='<path-of-known-hosts-file>'/>

note: other attributes deleted for clarity.

If strictHostKeyChecking='yes' and knownHostsFile is not set, drop hostChecking with a warning log.

If strictHostKeyChecking='yes' and knownHostsFile is set,
file is not accessible, throw IOException.

If strictHostKeyChecking='yes' and knownHostsFile is set,
file accessible, set the knownHostsFile to JSch's setHostNames(string fname) and use this during
SFtpClient.login(...) methods.

==
This can be a security concern.