diff --git a/ssh-over-gateway/README.md b/ssh-over-gateway/README.md
index 62b06eff..020b28df 100644
--- a/ssh-over-gateway/README.md
+++ b/ssh-over-gateway/README.md
@@ -11,11 +11,11 @@ This guide illustrates how to set up an SSH server within a tapp and access it u
    Add the following configuration block to your `~/.ssh/config` file:
    ```
    Host my-tee-box
-       ProxyCommand openssl s_client -quiet -connect <app-id>-1022.<dstack-serv-domain>:443
+       ProxyCommand openssl s_client -quiet -connect <app-id>-1022.<dstack-serv-domain>:443 -servername <app-id>-1022.<dstack-serv-domain> -verify_hostname <app-id>-1022.<dstack-serv-domain> -verify_return_error
    ```
    Be sure to replace `<app-id>` with your tapp's application ID and `<dstack-serv-domain>` with your dstack-gateway server's domain.
    Change the 443 to the port of the dstack-gateway if not using the default one.
-   Example ProxyCommand: `ProxyCommand openssl s_client -quiet -connect c3c0ed2429a72e11e07c8d5701725968ff234dc0-1022.dstack-prod5.phala.network:443`
+   Example ProxyCommand: `ProxyCommand openssl s_client -quiet -connect c3c0ed2429a72e11e07c8d5701725968ff234dc0-1022.dstack-prod5.phala.network:443 -servername c3c0ed2429a72e11e07c8d5701725968ff234dc0-1022.dstack-prod5.phala.network -verify_hostname c3c0ed2429a72e11e07c8d5701725968ff234dc0-1022.dstack-prod5.phala.network -verify_return_error`
 
 3. **Connect via SSH command**
    Finally, initiate the connection by running:
diff --git a/tcp-port-forwarding/README.md b/tcp-port-forwarding/README.md
index d8b914be..cb7b0586 100644
--- a/tcp-port-forwarding/README.md
+++ b/tcp-port-forwarding/README.md
@@ -57,7 +57,7 @@ Host my-dstack-app
     HostName <your-app-id>-22.<the-dstack-gateway-domain>
     User root
     Port 443
-    ProxyCommand openssl s_client -quiet -connect %h:%p
+    ProxyCommand openssl s_client -quiet -connect %h:%p -servername %h -verify_hostname %h -verify_return_error
 ```
 
 Change the 443 to the port of the dstack-gateway if not using the default one.