The combination of a major media brand, a CDN subdomain, and an insecure legacy protocol is a and a system administrator's nightmare .