1. A computer-implemented method, comprising: on a device configured as part of a security infrastructure to receive messages, receiving a message; selecting a first set of security information from a first plurality of sets of security information as a function of a property of the message, wherein the first set of security information comprises security settings that define types of messages that must be secured and wherein the types of messages that must be secured are defined and provided by an application developer; selecting a second set of security information from a second plurality of sets of security information as a function of the first set, wherein the second set of security information comprises security settings that specify particular operations and settings for securing the messages, wherein the particular operations and settings comprises algorithms to be used in signing and encrypting the messages, and wherein the second set is a distinct set from that of the first set; and applying the second set of security information to the message.