rustls just merged raw public key support (can be used in place of certificates):   https://github.com/rustls/rustls/pull/2062

Once released we will be able to run servers over TLS that don't need certificates, not even self-signed ones, but just use a key (unfortunately not a secp256k1 key since there is no TLS support for those).