What if Alice and Bob don’t know each other’s public key to start with ?

A Trusted Third Party can sign identities and public key, creating : A certificate. It’ll ensure that Alice and Bob can verify each other’s public key.