Choose N when I was asked to agree with your IP being logged

It might already be clear to you, but this warning refers to a transparency feature in Let's Encrypt that was never actually implemented, so it was belatedly removed in later Certbot versions.

The idea is that Let's Encrypt briefly considered publishing its log files related to certificate requests, which include the IP address from which the certificate was requested. Some fraction of early --manual users were running Certbot on their own personal computers rather than on their dedicated web servers, and this warning related to a concern that people might be surprised when their personal computers' IP addresses turned up in the certificate request log files.

As it turned out, Let's Encrypt ended up choosing not to publicly post its certificate request and challenge validation logs. (Issued certificates, but not the IP addresses from which they were requested, are all published in Certificate Transparency.) Also, most people using --manual today are using it for wildcard certificates—like yours—and typically running on their dedicated web servers rather than home PCs. So this warning message was never really helpful or relevant in practice.

6 Likes