I am a programmer who manages online exchanges user also and i have been asked to add IP address to SPF record so that one of the application can hosted on Azure can send emails to user etc..
v=spf1 +ip4:xxx.xxx.xxx.xxx include:spf.protection.outlook.com -all
Adding IP address to SPF record so that emails send from this application are accepted by the exchanges server and end up in the Inbox.
Now my question is, Is it safe to add IP address to SPF record from security point of view as am afraid it may be used to send malicious email by spoofing or other means such as IP impersonating or IP spoofing.
I personally am against adding IP address to SPF record as i am not sure if it can be misused to send back email to user in our organization.