But out-of-band could also mean going to the CA's web page and filling out a form such as typing in the some passwords/passphrase, presenting some electronic credentials or mother's maiden name (bad example) to request for the revocation. This would not involve staffing and would be nearly as quick as sending the revocation message through "in-band" means.
--Paul Hoffman, Director --Internet Mail Consortium