Hacker News Reader

Could this be it? TLS 1.3 connection, with every field in the packets labelled: https://tls13.xargs.org

No, not that one either. The page was static and full of high quality images dissecting the format structures.