That's the intention, but for DH, the secret key needs to be stored on each client. My thought is the web browser needs to save the key locally in order that encryption/decryption can happen locally.
Not so sure DH is the optimal solution. Keeping secret keys untrusted is a bit of an anti-pattern.