If a BM address is used for long-term authentication, there is a need to revoke it in case it gets compromised. Obviously, it is easy to create a new one, but there also should be a way to indicate to the user that an old address shouldn't be used.

The easiest way, in my opinion, is to add a new bitfield to an address, say BITFIELD_REVOKED, which can be turned on but not off (there needs to be some additional protection in the code so that simply editing keys.dat won't turn it off). The UI would then signal to the sender that they shouldn'd use it.

• Bitfield deifnition and a coresponnding variable in keys.dat
• UI for turning it on with warning and confirmations
• UI for showing (on the owner side) that an address is revoked, similarly to how disabled addresses are grayed out
• after revoked, a new pubkey object should be sent immediately, not only after the old one expires
• Protection against turning it off in BMConfigParser
• Protection against turning it off in some other way
• objectProcessor should handle the bitfield and flag entries in the addressbook (may require additional colums in addressbook table). It should also protect the flag/bitfield from being turned off after it is on
• messagelist should change background color for messages from revoeked addresses (maybe only after revocation date?)
• Send tab should complain or perhaps even grey out the send button if a revoked address is used
• Autoreply?
• some other things I'm missing?