Yeah noise is cool, but this is TLS that should already work in browsers and other HTTPS clients. If relays had ed25519 keypairs they could to wss:// TLS using them directly without certificates.