E.g. by comparing them in person? Ricochet can do that. The "Ricochet ID" is just a hash of the public key, so if you meet up in person and verify that you have added the correct ID for your counterparty, that sounds like you've verified the public keys, no?