I have set up the very basic DMARC txt record with p=none and email addresses for both rua and ruf. The rua reports are .xml and I was wondering how everyone is reading these reports. I have not received any ruf reports.
Very few domains send RUF reports due to privacy concerns, chances are you may not see any for some time or ever. Even if you do get one they are usually heavily redacted of most useful information.
You’ll have to rely on your RUA data to make adjustments to your authentication as you progress to quarantine and reject.