> a --verify option, which causes the program to print out a hex hash of the session key This is plenty enough. Another option is to use the ssh model whereby

> a --verify option, which causes the program to print out a hex hash of the session key This is plenty enough. Another option is to use the ssh model whereby the sender has a persistent keypair, uses it to sign the handshake and sends the pub key to the peer. If the peer has this key in its key cache, it proceeds quietly. Otherwise it pops up a "New key, please verify and approve" message before proceeding.