Thanks to AJ for this pointer. The "show changes" version of the Comcast subscriber agreement (available at http://www.comcastonline.com/subscriber-v3-red.asp). Section 6(b)(viii), outlaws the use of the residential Internet service in "CONJUNCTION WITH A VPN (VIRTUAL PRIVATE NETWORK) OR A VPN TUNNELING PROTOCOL."