Re: dynamic DNS, keys, and timeouts
1. Suppose the SSH server has a dynamic IP address and uses dynamic DNS. So WinSCP will connect using a hostname, but in fact the server's public IP address will change (its private IP address will NOT change). When the server's public IP address changes, will the keys become invalid?
Do you mean hostkey fingerprint validation?
WinSCP validates the hostkey against the hostname, if possible. So not.
Anyway, you can always specify explicit hostkey fingerprint on command-line:
https://winscp.net/eng/docs/scripting#hostkey
2. Can I assume that with default settings, WinSCP will timeout and give up after a reasonable amount of time if (a) it can't establish the connection, or (b) the connection is dropped during a transfer?
Yes.