I've been reading a lot about why plain oauth is bad for authentication, and one needs to at least build on top of it to reach an acceptable level of security.
That got me looking at the major oauth layered providers- Facebook Connect and Openid Connect.
Many websites say Facebook Connect has certain inherent issues that Openid Connect accounts for, but from a high level they seem to be adding the same things on top of oauth...
Can someone explain the differences in the protocols and what issues Facebook Connect has that the openid connect protocol covers?