I prefer the later because that way you can have cookies set only for the site subdomain and serve static elements from a cookieless subdomain, instead of a different domain altogether. Just add a redirect from the naked domain and you're golden.