There have been a lot of questions today about just what the recent Debian OpenSSL flaw means for Tor clients. Here's an attempt to explain it in a bit more detail.