HTTP-CoAP cross protocol proxy: an implementation viewpoint. - Angelo Paolo Castellani; Thomas Fossati; Salvatore Loreto (MASS Workshops, 2012)

SCS: KoanLogic's Secure Cookie Sessions for HTTP. - Stefano Barbato; Steven Dorigotti; Thomas Fossati (RFC, 2013)

Love All, Trust Few: on Trusting Intermediaries in HTTP. - Thomas Fossati; Vijay K. Gurbani; Vladimir Kolesnikov (HotMiddlebox@SIGCOMM, 2015)

Transport Layer Security (TLS) / Datagram Transport Layer Security (DTLS) Profiles for the Internet of Things. - Hannes Tschofenig; Thomas Fossati (RFC, 2016)

Guidelines for Mapping Implementations: HTTP to the Constrained Application Protocol (CoAP). - Angelo P. Castellani; Salvatore Loreto; Akbar Rahman; Thomas Fossati; Esko Dijk (RFC, 2017)

Analysis and Consideration on Management of Encrypted Traffic. - Pedro A. Aranda-Gutiérrez; Diego R. López; Thomas Fossati (CoRR, 2018)

Security and Privacy Implications of Middlebox Cooperation Protocols. - Thomas Fossati; Roman Muentener; Stephan Neuhaus; Brian Trammell (CoRR, 2018)

We all do better when we work together? - Thomas Fossati; Pedro A. Aranda-Gutiérrez; Diego R. López (CoRR, 2018)

Multipart Content-Format for the Constrained Application Protocol (CoAP). - Thomas Fossati; Klaus Hartke; Carsten Bormann (RFC, 2020)

Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME). - Yaron Sheffer; Diego R. López; Óscar González de Dios; Antonio Pastor Perales; Thomas Fossati (RFC, 2020)

Trustworthy things. - Henk Birkholz; Thomas Fossati (DAI-SNAC@CoNEXT, 2021)

An Automatic Certificate Management Environment (ACME) Profile for Generating Delegated Certificates. - Yaron Sheffer; Diego R. López; Antonio Pastor Perales; Thomas Fossati (RFC, 2021)

Connection Identifier for DTLS 1.2. - Eric Rescorla; Hannes Tschofenig; Thomas Fossati; Achim Kraus (RFC, 2022)

Concise Problem Details for Constrained Application Protocol (CoAP) APIs. - Thomas Fossati; Carsten Bormann (RFC, 2022)

Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). - Yaron Sheffer; Peter Saint-Andre; Thomas Fossati (RFC, 2022)

Formal Specification and Verification of Architecturally-Defined Attestation Mechanisms in Arm CCA and Intel TDX. - Muhammad Usama Sardar; Thomas Fossati; Simon Frost; Shale Xiong (IEEE Access, 2024)

Towards Validation of TLS 1.3 Formal Model and Vulnerabilities in Intel's RA-TLS Protocol. - Muhammad Usama Sardar; Arto Niemi; Hannes Tschofenig; Thomas Fossati (IEEE Access, 2024)

Separate but Together: Integrating Remote Attestation into TLS. - Carsten Weinhold; Muhammad Usama Sardar; Ionut Mihalcea; Yogesh Deshpande; Hannes Tschofenig; Yaron Sheffer; Thomas Fossati; Michael Roitzsch (USENIX ATC, 2025)

Entity Attestation Token (EAT) Media Types. - Laurence Lundblade; Henk Birkholz; Thomas Fossati (RFC, 2025)

Arm's Platform Security Architecture (PSA) Attestation Token. - Hannes Tschofenig; Simon Frost; Mathias Brossard; Adrian Shaw; Thomas Fossati (RFC, 2025)