Regarding RESTCONF writes to devices, which statement about TLS is correct?

RESTCONF, when used with HTTPS, relies on TLS (Transport Layer Security) for secure communication. While TLS itself requires certificates for authentication and is used for HTTPS requests, the specific mechanism for providing TLS in many Cisco device RESTCONF implementations, especially for northbound interfaces or management, involves NGINX acting as a reverse proxy. NGINX handles the TLS termination, offloading the encryption/decryption from the device's core processes and presenting a secure HTTPS interface. TLS is fundamental for secure web communication and is fully supported on Cisco devices.