It may be true that you want to trust all hosts inside your company, but I don't think this is a sane default. :-)

I think C Git just ties this in with sslVerify. If sslVerify is false, then hostname verification isn't performed either. If sslVerify is true, then both certificate and hostname verification is done.