In the realm of digital communication, the conventional messenger serves as a diligent archivist, meticulously cataloging user accounts, devices, contacts, and historical interactions. This persistent memory is undoubtedly beneficial, especially when recovering from mishaps like a dropped phone. However, the essence of communication—transmitting a message—seems overshadowed by the weight of accumulated data. While end-to-end encryption has bolstered privacy, it does not equate to forgetting. Services may still retain traces of interactions, and devices often harbor remnants of conversations long after they have been deleted from the user interface.
Most secure messaging platforms are built around the premise of secure, reliable, persistent communication. Yet, what if the design philosophy were flipped? What if forgetting became the foundational principle rather than an optional feature? This intriguing question is at the heart of Amnesia, a concept that challenges the very nature of private conversations.
Encryption Protects Content. Systems Preserve Everything Around It.
Modern secure messengers have made significant strides with features like end-to-end encryption and forward secrecy, which protect the content of messages. However, these advancements do not inherently erase the surrounding communication lifecycle. Conventional messengers require knowledge of user identities, active sessions, and recovery methods, all of which contribute to a state of continuity that can be exploited or compromised.
Amnesia seeks to redefine this paradigm by emphasizing temporary communication with minimum durable state. This approach does not dismiss the value of persistence; rather, it posits that certain conversations warrant a different kind of exchange.
The Opposite Design Brief
The initial prototype of Amnesia is intentionally minimalistic, designed to challenge expectations. It begins with a temporary session rather than a permanent account. Users can create one-time invitations, likely through QR codes, establishing a fleeting connection without the need for a global username or email address. Once the session concludes, so too does the relationship.
No Permanent Account
In contrast to traditional messengers that require extensive user enrollment, Amnesia initiates with a simple temporary session. This design eliminates the need for phone numbers, usernames, or any permanent directory, ensuring that once the session ends, the connection ceases to exist.
One Session, One Identity Epoch
Each session generates unique identity and signing keys, ensuring that credentials are not reused. This approach mitigates risks associated with session token theft, as the system demands proof of possession of the session’s private key for any privileged requests.
No Intentional Archive or Conventional Recovery
In its strictest form, Amnesia would not retain conversation histories. Messages would only exist during an active session, with no option for recovery or search functionality. This design choice emphasizes the principle that once the session is terminated, it is irretrievable, reinforcing the notion that the service cannot recover what it has not retained.
The First Prototype
The first iteration of Amnesia is focused on a singular lifecycle:
- A user initiates a temporary session.
- The application generates a fresh identity.
- A one-time QR invitation is created.
- A second device scans the QR code.
- Both devices complete an authenticated key agreement.
- Users verify a short code.
- Encrypted text is exchanged through a minimal relay.
- Either user selects End and Forget.
- Application-controlled identity keys and conversation state are destroyed.
- Restarting the application does not restore the previous session.
This design ensures that no profile remains to remind users of their past interactions, aligning with the core philosophy of Amnesia.
A Relay With Almost Nothing to Say
While a relay is necessary for facilitating communication, it operates without the need for understanding user accounts or long-term histories. Its functions are limited to:
- Opening a one-time rendezvous;
- Accepting an encrypted envelope;
- Returning an encrypted envelope;
- Expiring the rendezvous.
By design, the relay does not retain plaintext or message keys, and any undelivered messages would vanish upon a restart, embodying the intentional failure mode of Amnesia.
Information Starvation, Not Secret Design
Amnesia’s design does not rely on obscurity but rather on information starvation. The goal is to minimize the amount of durable material available to potential attackers, ensuring that even with complete knowledge of the protocol, the information recovered is limited.
RAM-Only Is Not a Magic Spell
While keeping everything in memory may seem like a foolproof strategy, the reality is more complex. Applications do not control the entire device, and various factors can lead to unintended data retention. Amnesia aims for strong forensic resistance by avoiding intentional persistence of plaintext and minimizing the lifespan of sensitive information.
Testing Whether “Forget” Means Anything
The effectiveness of Amnesia may hinge on its ability to demonstrate true forgetfulness. A robust testing harness will assess whether sensitive markers remain after a session, providing evidence that the application did not intentionally preserve any state.
This Is Civil Technology
Amnesia is envisioned not as a tool for illicit activities but as civil technology that empowers individuals to communicate without the burden of permanent records. In an age where surveillance is pervasive, the ability to minimize recoverable identity and history can be crucial for various individuals, from journalists to activists.
The Longer-Term Idea: AmnesiaOS
Looking ahead, the vision for Amnesia extends beyond a mere messaging application. The concept of AmnesiaOS could revolutionize mobile security by integrating disposable sessions and verified system images, creating an environment where identities and messages exist solely within a temporary communication framework.
What Exists Today
Currently, Amnesia is an architectural concept and an early prototype. It is not yet audited or production-ready, and it should not be utilized for sensitive communications. The immediate goal is to establish a functioning lifecycle that allows users to create, connect, communicate, and ultimately forget.
Why Build It in Public?
Transparency is vital for the development of Amnesia. By making the protocol and design publicly accessible, the project invites scrutiny from experts and communities alike, fostering a collaborative environment that prioritizes security and usability over marketing hype. The fundamental question remains: how little can we preserve while still enabling meaningful communication?
Amnesia represents a bold exploration of a new paradigm in digital communication, one that prioritizes the act of forgetting as much as it does the act of connecting.
Amnesia is an independent, intended-to-be-open-source research project. Readers who want to support prototype hardware, relay hosting, persistence testing, and continued development can do so through Ko-fi.
