Both. I use the jQuery.validation plugin for the front-end. It can put nice little inline messages next to the form fields which make it easier for the user to find the offending form fields.
For validation errors from the server-end, we just the ColdBox message plugin that puts a message at the top of the screen when the page reloads.
~Brad