max-age=0 ensures that the response is straight away stale, and must-revalidate ensures that it should not be reused without having revalidation at the time it's stale — so, in combination, the semantics seem to be similar to no-cache.This enables an origin server to stop caching even by caches that have been configured to return stale responses