Inbound DMARC Reports opens with a card per domain: every sender seen,
named by the domain whose DKIM or SPF passed (else its IP), how many
messages passed, and what receivers did with the ones that failed.
Failures say in plain words that someone may be pretending to be you,
and a "none" policy gets the next step. TLS Reports opens with secure
and failed deliveries per domain, each failure kind explained.
Admin UX roadmap, item 6.
jcoffey-dev