I had the impression that canonicalization (c14n? :-) ) as an idempotent operation, that is, if you recursively apply canonicalization to a name you'll keep obtaining the same result. At that point, I think that it could be safe to add canonicalization both at resolver and at server, so that even if one of those fails we get the correct result anyway.
--Paul Hoffman, Director --Internet Mail Consortium