It's still an agreement between Comcast and HBO based on TV subscriptions - it's not like Comcast is null routing the packets that would allow "authentication". Luckily, the market (i.e. HBO, in the face of consumer demand and competition) has already worked around these stifling agreements by providing the unbundled HBO Now. Which Comcast can't block, DNSSEC misconfiguration notwithstanding.