Nostr works on HTTPS already.
You could generate a shared secret already, but why would you want to?
And what will you do with the shared secret after that?
TLSeminar
The First Few Milliseconds of an TLS 1.2 Connection · TLSeminar