There are pros and cons but confirming the email seems to be better. I once had typed equally wrong my password and it's confirmation on a registration. Thankfully I was able to change it through my email.
The email is the most important thing of yours in a website registration, because it's through it that you manage your password and not only that but nowadays your email is also your login. The password confirmation seems a heritage from the past where most websites required a username.
Yes, I know, there is also cons. You asking for retyping something that is already filled and visible and there is the copy and paste problem. But that seems rather small issues for me.
As for preventing pasting, I, as a user, wouldn't bother. Just a light fade in/fade out alert when pasting would be enough to not let the user pissed when pasting.
But I was surprised of how much people hates this [1] [2]:
I hate you.
That is certainly ONE way of making me hate your site (and never use it if I can avoid it).
This is awful - Almost as bad as breaking the "back button".
"So we decided to give you a headache right now. Just in case."
Maybe all this hate is a fear that this kind of fix spreads out to where it shouldn't be used? Is the purism kicking? Complex emails? Laziness?
Dunno.