Send an 256 bit key asymmetrically encrypted with ECDH, basically following ECIES/DHAES.
Use prime256v1 (= NIST P-256 = secp256r1) for compatibility with browser Web Crypto API.
Use EC public key compression.
At the moment 2 implementation examples exist:
MIT