* **TCP doesn't know about "domains"**. Only about IP addresses.
    * The information about the **specific domain** requested goes in the **HTTP data**.
* The **HTTPS certificates** "certify" a **certain domain**, but the protocol and encryption happen at the TCP level, **before knowing** which domain is being dealt with.
* **By default**, that would mean that you can only have **one HTTPS certificate per IP address**.

       child.scm.url.inherit.append.path="false">
    <connection>scm:my-scm:http://domain.org/base</connection>
    <developerConnection>scm:my-scm:https://domain.org/base/</developerConnection>
    <url>https://domain.org/base</url>
  </scm>
  <distributionManagement>
    <site child.site.url.inherit.append.path="false">
      <url>scp://scp.domain.org/base/</url>
    </site>
  </distributionManagement>

       child.scm.url.inherit.append.path="true">
    <connection>scm:my-scm:http://domain.org/base</connection>
    <developerConnection>scm:my-scm:https://domain.org/base/</developerConnection>
    <url>https://domain.org/base</url>
  </scm>
  <distributionManagement>
    <site child.site.url.inherit.append.path="true">
      <url>scp://scp.domain.org/base/</url>
    </site>
  </distributionManagement>

  <url>http://www.apache.org/path/to/parent/</url>
  <scm>
    <connection>scm:my-scm:http://domain.org/base</connection>
    <developerConnection>scm:my-scm:https://domain.org/base/</developerConnection>
    <url>https://domain.org/base</url>
  </scm>
  <distributionManagement>
    <site>
      <url>scp://scp.domain.org/base/</url>
    </site>
  </distributionManagement>

  <scm>
    <connection>scm:my-scm:http://domain.org/base/../child-artifact-id</connection>
    <developerConnection>scm:my-scm:https://domain.org/base/../child-artifact-id/</developerConnection>
    <url>https://domain.org/base/../child-artifact-id</url>
  </scm>
  <distributionManagement>
    <site>
      <url>scp://scp.domain.org/base/../child-artifact-id/</url>
    </site>
  </distributionManagement>

  <scm>
    <connection>scm:my-scm:http://domain.org/base/child-artifact-id</connection>
    <developerConnection>scm:my-scm:https://domain.org/base/child-artifact-id/</developerConnection>
    <url>https://domain.org/base/child-artifact-id</url>
  </scm>
  <distributionManagement>
    <site>
      <url>scp://scp.domain.org/base/child-artifact-id/</url>
    </site>
  </distributionManagement>

       child.scm.url.inherit.append.path="false">
    <connection>scm:my-scm:http://domain.org/base</connection>
    <developerConnection>scm:my-scm:https://domain.org/base/</developerConnection>
    <url>https://domain.org/base</url>
  </scm>
  <distributionManagement>
    <site child.site.url.inherit.append.path="false">
      <url>scp://scp.domain.org/base/</url>
    </site>
  </distributionManagement>

       child.scm.url.inherit.append.path="false">
    <connection>scm:my-scm:http://domain.org/base</connection>
    <developerConnection>scm:my-scm:https://domain.org/base/</developerConnection>
    <url>https://domain.org/base</url>
  </scm>
  <distributionManagement>
    <site child.site.url.inherit.append.path="false">
      <url>scp://scp.domain.org/base/</url>
    </site>
  </distributionManagement>

     * <p>
     * Specifically, if the SID has
     * been resolved and it is not a domain SID or builtin account,
     * the full DOMAIN\name form of the account will be
     * returned (e.g. MYDOM\alice or MYDOM\Domain Users).
     * If the SID has been resolved but it is is a domain SID,
     * only the domain name will be returned (e.g. MYDOM).
     * If the SID has been resolved but it is a builtin account,

     * 
     * @param domain
     * @param username
     * @param password
     */
    public NtlmPasswordAuthenticator ( String domain, String username, String password ) {
        this(domain, username, password, AuthenticationType.USER);
    }


    /**
     * Create username/password credentials with specified domain
     * 
     * @param domain