Yea. The html must have signature and Bob has public key of Alice to verify ... and we here again. :)