Implementations.
What FIDOA decides to passkey and you with your website are totally different security agendas. The Hack goes into detail how corporations can refuse several of your passkey settings.
They are not different implementations, they are completely different things. TOTP can’t have remote attestation or settings, it’s just a code. Passkeys are something else, that has some similarities (also generating a time-based code).
Implementations.
What FIDOA decides to passkey and you with your website are totally different security agendas. The Hack goes into detail how corporations can refuse several of your passkey settings.
They are not different implementations, they are completely different things. TOTP can’t have remote attestation or settings, it’s just a code. Passkeys are something else, that has some similarities (also generating a time-based code).